Arris Vap2500 vulnerabilities

6 vulnerabilities

Known vulnerabilities in Arris Vap2500, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

10CVE-2014-8423arrisvap2500_firmware
EPSS score
62.48%
Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.7.8CVE-2014-8425arrisvap2500_firmware
EPSS score
3.14%
The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files.7.8CVE-2014-8424arrisvap2500_firmware
EPSS score
59.62%
ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.7.2CVE-2024-5195arrisvap2500_firmware
EPSS score
23.56%
A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diag_s.php. The manipulation of the argument customer_info leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265832.7.2CVE-2024-5194arrisvap2500_firmware
EPSS score
3.61%
A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoc_table.php. The manipulation of the argument id leads to command injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-265831.7.2CVE-2024-5196arrisvap2500_firmware
EPSS score
23.56%
A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-265833 was assigned to this vulnerability.