Vulnerabilities in Arris
7 resultsVexday analysis
Arris possui 7 vulnerabilidades catalogadas, sendo 1 crítica, mas nenhuma sob exploração ativa conhecida no momento. A fraqueza dominante é CWE-77 (Improper Neutralization of Special Elements used in a Command), indicando risco de injeção de comandos. Não há atividade recente de disclosure (últimos 90 dias), sugerindo um risco estável e não emergente.
CVE-2024-5195MEDIUMArris VAP2500 diag_s.php command injectionEPSS 4.2%CVE-2024-5196MEDIUMArris VAP2500 tools_command.php command injectionEPSS 4.2%CVE-2024-5194MEDIUMArris VAP2500 assoc_table.php command injectionEPSS 3.6%CVE-2024-23618CRITICALArris SURFboard SBG6950AC2 Arbitrary Code Execution VulnerabilityEPSS 1.2%CVE-2025-49162MEDIUMArris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character alloEPSS 0.2%CVE-2025-49163MEDIUMArris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file.EPSS 0.1%CVE-2025-49164MEDIUMArris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f5EPSS 0.1%