CVE-2019-15806

CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/basicsett.html. Any user connected to the Wi-Fi can exploit this...

CVE-2019-15805

CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current base64 encoded password within http://192.168.1.1/login.html. Any user connected to the Wi-Fi can exploit this...

CVE-2018-17555

The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter...

CVE-2018-20383

ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0 SNMP requests...

CVE-2014-9406

ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote attackers to obtain access via a request to homeloggedout.php...

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

CVE-2024-41643

CVE-2024-41643 is associated with Arris NVG443B firmware 9.3.0h3d36. The vulnerability allows a physically proximate attacker to execute arbitrary code via the cshell login component. The CVSS 3.1 base score is 6.8 (MEDIUM), with high impact to confidentiality, integrity, and availability, and an...

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

CVE-2024-41643

An issue in Arris NVG443B 9.3.0h3d36 allows a physically proximate attacker to execute arbitrary code via the cshell login component...

ARRIS NVG443B 安全漏洞

The ARRIS NVG443B is a full-featured, high-performance gateway from ARRIS, Inc. A security vulnerability exists in the ARRIS NVG443B version 9.3.0h3d36, which stems from a physical access attack in the cshell login component that could lead to the execution of arbitrary code...

CVE-2024-23618

An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve code execution as root...

Arris DG950A Cable Modem Wifi Enumeration

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Arris DG950A Cable Modem Wifi Enumeration', 'Description' = %q This module will extract WEP keys and WPA preshared keys from Arris DG950A cable...

Arris / Motorola Surfboard SBG6580 Web Interface Takeover

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Arris / Motorola Surfboard SBG6580 Web Interface Takeover', 'Description' = %q The web interface for the Arris / Motorola Surfboard SBG6580 has...

Exploit for Command Injection in Commscope Arris_Tg2482A_Firmware

EN This project provides a Python script to exploit a remote c...

CVE-2024-5196

A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /toolscommand.php. The manipulation of the argument cmbheader/txtcommand leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-5196

A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /toolscommand.php. The manipulation of the argument cmbheader/txtcommand leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-5196 Arris VAP2500 tools_command.php command injection

A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /toolscommand.php. The manipulation of the argument cmbheader/txtcommand leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-5196 Arris VAP2500 tools_command.php command injection

A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /toolscommand.php. The manipulation of the argument cmbheader/txtcommand leads to command injection. It is possible to initiate the attack remotely. The exploit has been disclose...

CVE-2024-5196

CVE-2024-5196 targets Arris VAP2500 v08.50. A vulnerability in /tools_command.php (parameter cmb_header/txt_command) allows remote command injection. Exploitation is possible remotely; public disclosure noted. No remediation details provided in the supplied documents.

CVE-2024-5195

A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diags.php. The manipulation of the argument customerinfo leads to command injection. The attack may be launched remotely. The exploit has been disclos...