Arris

6 results · Clear filters · Feed

• Medium 6.4
  CVE-2025-49162

  Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a…

  Arris VIP1113
  Jun 2, 2025
• Medium 4.3
  CVE-2025-49164

  Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a4…

  Arris VIP1113
  Jun 2, 2025
• Medium 6.7
  CVE-2025-49163

  Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip…

  Arris VIP1113
  Jun 2, 2025
• Medium 4.7
  CVE-2024-5196 EPSS 24%

  Arris VAP2500 tools_command.php command injection

  A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attac…

  Arris VAP2500
  May 22, 2024
• Medium 4.7
  CVE-2024-5195 EPSS 24%

  Arris VAP2500 diag_s.php command injection

  A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diag_s.php. The manipulation of the argument customer_info leads to command injection. The attack may be launche…

  Arris VAP2500
  May 22, 2024
• Medium 4.7
  CVE-2024-5194

  Arris VAP2500 assoc_table.php command injection

  A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoc_table.php. The manipulation of the argument id leads to command injection. The attack can be laun…

  Arris VAP2500
  May 22, 2024