Arris vulnerabilities
We track 13 vulnerabilities in Arris products across 21 products. 13 are rated high or critical, and none are known to be exploited. The most recent was published on May 22, 2024.
Latest Arris vulnerabilities
- 7.2 High severity
VAP2500: Improper Neutralization of Special Elements used in a Command
A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php. The manipulation of the argument cmb_header/txt_command leads to command injection. It is possible to initiate the attack
- 7.2 High severity
VAP2500: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diag_s.php. The manipulation of the argument customer_info leads to command injection. The attack may be launched
- 7.2 High severity
VAP2500: Improper Neutralization of Special Elements used in a Command
A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /assoc_table.php. The manipulation of the argument id leads to command injection. The attack can be launc
- 8.8 High severity
sbg6580: Weak Password Requirements
Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last octet.)
- 9.8 Critical severity
SURFboard SBG6950AC2: Missing Authentication for Critical Functionality
An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.
- 8.8 High severity
Dg860a Firmware: Improper Authentication
Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)
- 9.8 Critical severity
tg852g: Improper Access Control
An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame.
- 7.5 High severity
Muhttpd: Improper Limitation of a Pathname to a Restricted Directory
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving file
- 9.8 Critical severity
Sbr-ac1900p Firmware: Improper Neutralization of Special Elements used in an OS Command
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the pptpUserName and pptpPassword parameters. This vulnerability allows attackers to exec
- 9.8 Critical severity
Sbr-ac1900p Firmware: Improper Neutralization of Special Elements used in an OS Command
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the pppoeUserName, pppoePassword, and pppoe_Service parameters. This vulnerability allow
- 9.8 Critical severity
Sbr-ac1900p Firmware: Improper Neutralization of Special Elements used in an OS Command
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and DdnsPassword parameters. This vulnerability allows at
- 9.8 Critical severity
Sbr-ac1900p Firmware: Improper Neutralization of Special Elements used in an OS Command
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the TimeZone parameter. This vulnerability allows attackers to execute arbitrary commands
- 9.8 Critical severity
Sbr-ac1900p Firmware: Improper Neutralization of Special Elements used in an OS Command
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log function via the EmailAddress, SmtpServerName, SmtpUsername, and SmtpPassword parameters