Commscope vulnerabilities, page 2
54 vulnerabilities
Known vulnerabilities in Commscope products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 24 products.
CVE-2025-44958commscoperuckus_network_director+1
EPSS score0.34%
RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.CVE-2025-44957commscoperuckus_network_director+2EPSS score0.98%
Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.CVE-2025-44960commscoperuckus_network_director+2EPSS score1.84%
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.CVE-2025-44955commscoperuckus_network_director+1EPSS score0.48%
RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.CVE-2025-44954commscoperuckus_smartzone_firmware+1EPSS score0.73%
RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.CVE-2020-26878commscoperuckus_vriotEPSS score11.59%
Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injecting arbitrary commands that will be executed as root user via web.py.CVE-2020-26879commscoperuckus_vriotEPSS score44.37%
Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by using a backdoor value as the Authorization header.CVE-2020-9476commscopearris_tg1692a_firmwareEPSS score0.96%
ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding.CVE-2020-7983commscoperuckus_zoneflex_r500_firmwareEPSS score0.62%
A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.CVE-2020-8830commscoperuckus_zoneflex_r500_firmwareEPSS score0.51%
CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen.CVE-2020-8033commscoperuckus_zoneflex_r500_firmwareEPSS score0.70%
Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.CVE-2014-3778commscopearris_sbg901EPSS score1.94%
Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the authentication of administrators for requests that (1) change the dns service via the DdnsService parameter, (2) change the username via the DdnsUserName parameter, (3) change the password via the DdnsPassword parameter, or (4) change the host name via the DdnsHostName parameter.CVE-2022-26997commscopearris_tr3300_firmwareEPSS score3.42%
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26998commscopearris_tr3300_firmwareEPSS score3.42%
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26999commscopearris_tr3300_firmwareEPSS score3.42%
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_stat, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26995commscopearris_tr3300_firmwareEPSS score2.85%
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-26996commscopearris_tr3300_firmwareEPSS score2.85%
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd, and pppoe_servicename parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-27001commscopearris_tr3300_firmwareEPSS score3.42%
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-27000commscopearris_tr3300_firmwareEPSS score3.42%
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.CVE-2022-27002commscopearris_tr3300_firmwareEPSS score5.07%
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddnsăddns_host parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.