ARRIS VAP2500 Management Portal Remote Command Execution Vulnerability

ARRIS VAP2500 - WIRELESS VIDEO ACCESS POINT This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ARRIS VAP2500. Authentication is not required to exploit this vulnerability. The specific flaw exists within the handling of access to the management...

CVE-2014-8425

The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files...

CVE-2014-8424

ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication...

CVE-2014-8423

Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors...

Design/Logic Flaw

The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files...

Authentication flaw

ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication...

Code injection

Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors...

EUVD-2014-8262

The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files...

CVE-2014-8423

Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors...

CVE-2014-8424

ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication...

CVE-2014-8425

The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files...

CVE-2014-8423

Arris VAP2500 devices are affected by CVE-2014-8423 in the management portal, enabling OS command injection/remote code execution via the tools_command.php page. Exploitation can bypass authentication by tampering a cookie (md5 hash of a valid username), allowing remote command execution with roo...

CVE-2014-8424

CVE-2014-8424 affects ARRIS VAP2500 before FW08.41, where authentication handling does not properly validate passwords, allowing remote attackers to bypass authentication. The vulnerability is described across multiple sources (NVD entry and ZDI advisory) with exploit activity seen in public disc...

CVE-2014-8425

The ARRIS VAP2500 management portal (firmware before FW08.41) is exposed to an information-disclosure vulnerability where configuration files can be read remotely, allowing an attacker to obtain credentials. This is documented as CVE-2014-8425 with a CVSS v2 base score of 7.8 (HIGH), indicating n...

CVE-2014-8424: Improper Authentication

ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication...

CVE-2014-8425: Exposure of Sensitive Information to an Unauthorized Actor

The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files...

CVE-2014-8423: Improper Neutralization of Special Elements in Output Used by a Downstream Component

Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors...

Arris VAP2500 Authentication Bypass Vulnerability

Exploit for hardware platform in category web applications !/usr/bin/env ruby require 'net/http' require 'digest/md5' if !ARGV0 puts "Usage: $0 " exit0 end host = ARGV0 newpass = "h4x0r3d!" http = Net::HTTP.newhost.start users = nil users = http.requestget"/admin.conf".body.split"\n".map! |user|...

PT-2014-8518

Name of the Vulnerable Software and Affected Versions ARRIS VAP2500 versions prior to FW08.41 Description The issue allows remote attackers to bypass authentication due to improper password validation. Recommendations For ARRIS VAP2500 versions prior to FW08.41, update to FW08.41 or later to...

PT-2014-8517

Name of the Vulnerable Software and Affected Versions ARRIS VAP2500 versions prior to FW08.41 Description The issue concerns an unspecified vulnerability in the management portal of the ARRIS VAP2500. This vulnerability allows remote attackers to execute arbitrary commands. The exact vectors used...