Commscope vulnerabilities

54 vulnerabilities

Known vulnerabilities in Commscope products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.

Products

24
9.8CVE-2018-20386commscopearris_sbg6580-2_firmware
EPSS score
1.82%
ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.9.8CVE-2018-20383arrisdg950s_firmware+1
EPSS score
1.82%
ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests.7.5CVE-2018-17555commscopearris_tg2492lg-na_firmware
EPSS score
1.98%
The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter.6.6CVE-2018-10989commscopearris_tg1682g_firmware
EPSS score
1.39%
Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of "password" for the admin account that is used over an unencrypted http://192.168.0.1 connection, which might allow remote attackers to bypass intended access restrictions by leveraging access to the local network. NOTE: one or more user's guides distributed by ISPs state "At a minimum, you should set a login password."8CVE-2018-10990commscopearris_tg1682g_firmware
EPSS score
1.07%
On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the "credential" cookie, which might make it easier for attackers to obtain access at a later time (e.g., "at least for a few minutes"). NOTE: there is no documentation stating that the web UI's logout feature was supposed to do anything beyond removing the cookie from one instance of a web browser; a client-side logout action is often not intended to address cases where a person has made a copy of a cookie outside of a browser.8.8CVE-2021-41552commscopearris_surfboard_sbg10_firmware+4
EPSS score
0.68%
CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection.7.1CVE-2021-20119commscopearris_surfboard_sb8200_firmware
EPSS score
0.46%
The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.8.8CVE-2021-20120commscopearris_surfboard_sb8200_firmware
EPSS score
0.56%
The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker could make configuration changes (such as changing the administrative password) without the consent of the user.9CVE-2021-33217commscoperuckus_iot_controller
EPSS score
1.38%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The Web Application allows Arbitrary Read/Write actions by authenticated users. The API allows an HTTP POST of arbitrary content into any file on the filesystem as root.9.8CVE-2021-33216commscoperuckus_iot_controller
EPSS score
13.77%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowing shell access via a developer account.10CVE-2021-33218commscoperuckus_iot_controller
EPSS score
2.30%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access.9.8CVE-2021-33221commscoperuckus_iot_controller
EPSS score
56.08%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Unauthenticated API Endpoints.9.8CVE-2021-33219commscoperuckus_iot_controller
EPSS score
2.15%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded Web Application Administrator Passwords for the admin and nplus1user accounts.4.3CVE-2021-33215commscoperuckus_iot_controller
EPSS score
1.19%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal.7.8CVE-2021-33220commscoperuckus_iot_controller
EPSS score
0.25%
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist.9.8CVE-2025-67305commscoperuckus_network_director
EPSS score
0.57%
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authenticated, the attacker can access the PostgreSQL database with superuser privileges, create administrative users for the web interface, and potentially escalate privileges further.9.8CVE-2025-67304commscoperuckus_network_director
EPSS score
0.56%
In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the hardcoded credentials to authenticate remotely, gaining superuser access to the database. This allows creation of administrative users for the web interface, extraction of password hashes, and execution of arbitrary OS commands.9CVE-2025-44963commscoperuckus_network_director+1
EPSS score
0.63%
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.9.9CVE-2025-44961commscoperuckus_network_director+2
EPSS score
2.12%
In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.5CVE-2025-44962commscoperuckus_network_director+2
EPSS score
0.82%
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.