547 matches found
CVE-2023-40039
The CVE-2023-40039 issue affects ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker within Wi‑Fi proximity can derive the default WPA2‑PSK by observing beacon frames, enabling potential unauthorized access to the network (impact described as total). Public details consistently identify ...
PT-2023-27230 · Arris · Arris Tg862G +2
Name of the Vulnerable Software and Affected Versions: ARRIS TG852G affected versions not specified ARRIS TG862G affected versions not specified ARRIS TG1672G affected versions not specified Description: A remote attacker in proximity to a Wi-Fi network can derive the default WPA2-PSK value by...
Arris VAP2500 Remote Code Execution Vulnerability (CNVD-2023-62027)
The Arris VAP2500 is a device from the Arris Group that is a video gateway and WIFI signal booster for extending home network coverage and providing wireless connectivity. The Arris VAP2500 suffers from a remote code execution vulnerability that stems from the listmacaddress.php file not strictly...
VulnCheck KEV: CVE-2022-27002
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddnsname, ddnspwd, hddns、ddnshost parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request...
CVE-2023-27572
An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18041520711.NCS.10. A reflected XSS vulnerability was discovered in the httpsredirect.php web page via the page parameter...
CVE-2023-27572
An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18041520711.NCS.10. A reflected XSS vulnerability was discovered in the httpsredirect.php web page via the page parameter...
Cross site scripting
An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18041520711.NCS.10. A reflected XSS vulnerability was discovered in the httpsredirect.php web page via the page parameter...
ARRIS DG3450 访问控制错误漏洞
The ARRIS DG3450 is a cable gateway from ARRIS America. A security vulnerability exists in the ARRIS DG3450 Cable Gateway AR01.02.056.18041520711.NCS.10 version, which stems from the log file download feature not checking for session cookies.An attacker can exploit this vulnerability to download...
CVE-2023-27572
CVE-2023-27572 concerns the CommScope Arris DG3450 Cable Gateway (AR01.02.056.18_041520_711.NCS.10). A reflected XSS vulnerability exists in the https_redirect.php page exposed via the page parameter. Affected component is the web page handling user input; under the provided data the CVSS base me...
CVE-2023-27572
An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18041520711.NCS.10. A reflected XSS vulnerability was discovered in the httpsredirect.php web page via the page parameter...
PT-2023-21216 · Commscope · Arris Dg3450 Cable Gateway
Name of the Vulnerable Software and Affected Versions: CommScope Arris DG3450 Cable Gateway version AR01.02.056.18 041520 711.NCS.10 Description: A reflected XSS issue was discovered in the "https redirect.php" web page via the page parameter. This allows for potential malicious script execution...
Arris Router Firmware 9.1.103 - Remote Code Execution (Authenticated) Exploit
Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution RCE Authenticated Exploit Author: Yerodin Richards Vendor Homepage: https://www.commscope.com/ Version: 9.1.103 Tested on: TG2482A, TG2492, SBG10 CVE : CVE-2022-45701 import requests import base64 routerhost = "http://192.168.0....
Arris Router Firmware 9.1.103 - Remote Code Execution (RCE) (Authenticated)
Exploit Title: Arris Router Firmware 9.1.103 - Remote Code Execution RCE Authenticated Date: 17/11/2022 Exploit Author: Yerodin Richards Vendor Homepage: https://www.commscope.com/ Version: 9.1.103 Tested on: TG2482A, TG2492, SBG10 CVE : CVE-2022-45701 import requests import base64 routerhost =...
ARRIS DG3450 跨站脚本漏洞
The ARRIS DG3450 is a cable gateway from ARRIS America. The ARRIS DG3450 Cable Gateway suffers from a cross-site scripting vulnerability that stems from the presence of a reflective cross-site scripting vulnerability, which can be exploited by an attacker to execute arbitrary JavaScript code in t...
Arris DG3450 AR01.02.056.18_041520_711.NCS.10 XSS / Missing Authentication Vulnerabilities
Arris DG3450 cable gateway version AR01.02.056.18041520711.NCS.10 suffers from cross site scripting and missing authentication vulnerabilities. ======================================================================= title: Multiple Vulnerabilities product: Arris DG3450 Cable Gateway vulnerable...
The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 allows a hacker to execute arbitrary code.
The vulnerability of the microprogrammed software of Arris routers such as TG2482A, TG2492, and SBG10 is related to errors in processing input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code by sending a specially crafted request...
Arris DG3450 AR01.02.056.18_041520_711.NCS.10 XSS / Missing Authentication
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Arris DG3450 Cable Gateway vulnerable version: AR01.02.056.18041520711.NCS.10 fixed version: - CVE number: CVE-2023-27571, CVE-2023-2757...
A week in security (February 13 - 19)
Last week on Malwarebytes Labs: What is AI good at and what the heck is it, actually, with Josh Saxe: Lock and Code S04E04 Malwarebytes recognized as endpoint security leader by G2 CISA issues alert with South Korean government about DPRK's ransomware antics Jailbreaking ChatGPT and other large...