CommScope vulnerabilities
We track 14 vulnerabilities in CommScope products across 5 products. 14 are rated high or critical, and 1 has been exploited in real attacks. The most recent was published on February 19, 2026.
Latest CommScope vulnerabilities
- 9.8 Critical severity
Ruckus Network Director: Use of Hard-coded Cryptographic Key
In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deployments, allowing an attacker with network access to authenticate via SSH without a password. Once authent
- 9.8 Critical severity
Ruckus Network Director: Use of Hard-coded Credentials
In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configuration, the PostgreSQL service is accessible over the network on TCP port 5432. An attacker can use the
- 8.1 High severity
Network Director: Use of Hard-coded Cryptographic Key
RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
- 9.8 Critical severity
SURFboard SBG6950AC2: Missing Authentication for Critical Functionality
An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root.
- 9.6 Critical severity
Ruckus Cloudpath Enrollment System: Improper Neutralization of Input During Web Page Generation
A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute persistent XSS and CSRF attacks against a user of the admin management interface. A suc
- 9.8 Critical severity
Multiple Ruckus Wireless Products CSRF and RCE Exploited
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. This vulnerability allows attackers to execute arbitrary commands
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_stat, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd, and pppoe_servicename parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted reque
- 9.8 Critical severity
Arris Tr3300 Firmware: Improper Neutralization of Special Elements used in a Command
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary comman