Login Request a demo
AR
Vendor
Arris
28 products with CVEs on record
54
CVEs
0
On KEV
0
New 30D
Products
VF
Vap2500 Firmware
Arris
7.2
6 CVEs0 on KEV0 new
SF
Sbr-ac1200p Firmware
Arris
9.8
5 CVEs0 on KEV0 new
SF
Sbr-ac1900p Firmware
Arris
9.8
5 CVEs0 on KEV0 new
SF
Sbr-ac3200p Firmware
Arris
9.8
5 CVEs0 on KEV0 new
NM
NA Model 862 GW Mono Firmware
Arris
–
4 CVEs0 on KEV0 new
TT
Touchstone Tg862g/ct Firmware
Arris
–
3 CVEs0 on KEV0 new
VA
VAP2500
Arris
7.2
3 CVEs0 on KEV0 new
VI
VIP1113
Arris
6.7
3 CVEs0 on KEV0 new
BF
Bgw210 Firmware
Arris
7.5
1 CVEs0 on KEV0 new
BF
Bgw320 Firmware
Arris
7.5
1 CVEs0 on KEV0 new
CC
Cadant C3 Cmts
Arris
–
1 CVEs0 on KEV0 new
DF
Dg1670a Firmware
Arris
8.8
1 CVEs0 on KEV0 new
DF
Dg860a Firmware
Arris
8.8
1 CVEs0 on KEV0 new
DF
Dg950s Firmware
Arris
9.8
1 CVEs0 on KEV0 new
NF
Nvg443 Firmware
Arris
7.5
1 CVEs0 on KEV0 new
NF
Nvg443b Firmware
Arris
6.1
1 CVEs0 on KEV0 new
NF
Nvg510 Firmware
Arris
7.5
1 CVEs0 on KEV0 new
NF
Nvg589 Firmware
Arris
7.5
1 CVEs0 on KEV0 new
NF
Nvg599 Firmware
Arris
7.5
1 CVEs0 on KEV0 new
RZ
Ruckus Zoneflex R500 Firmware
Arris
7.2
1 CVEs0 on KEV0 new
SB
Sbg6580
Arris
8.8
1 CVEs0 on KEV0 new
SS
SURFboard SBG6950AC2
Arris
9.8
1 CVEs0 on KEV0 new
TF
Tg1672g Firmware
Arris
9.8
1 CVEs0 on KEV0 new
TF
Tg1682g Firmware
Arris
8.8
1 CVEs0 on KEV0 new
TF
Tg852g Firmware
Arris
9.8
1 CVEs0 on KEV0 new
TF
Tg862g Firmware
Arris
9.8
1 CVEs0 on KEV0 new
TD
Touchstone Dg950a
Arris
–
1 CVEs0 on KEV0 new
TD
Touchstone Dg950a Software
Arris
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-49162
VI
VIP1113
Arris
6.4
0%
Jun 2Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local…
CVE-2025-49164
VI
VIP1113
Arris
4.3
0%
Jun 2Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f51ced50f2530668a
CVE-2025-49163
VI
VIP1113
Arris
6.7
0%
Jun 2Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file
CVE-2024-5196
VA
VAP2500
Arris
7.2
24%
May 22Arris VAP2500 tools_command.php command injection
CVE-2024-5195
VA
VAP2500
Arris
7.2
24%
May 22Arris VAP2500 diag_s.php command injection
CVE-2024-5194
VA
VAP2500
Arris
7.2
4%
May 22Arris VAP2500 assoc_table.php command injection
CVE-2024-25729
SB
Sbg6580
Arris
8.8
0%
Mar 7Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to unauthorized remote access
CVE-2024-23618
SS
SURFboard SBG6950AC2
Arris
9.8
1%
Jan 25Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability
CVE-2023-40038
DF
Dg860a Firmware
Arris
8.8
0%
Dec 27Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access
CVE-2023-40039
TF
Tg852g Firmware
Arris
9.8
1%
Sep 11An issue was discovered on ARRIS TG852G, TG862G, and TG1672G devices
CVE-2022-45028
NF
Nvg443b Firmware
Arris
6.1
1%
Dec 13A cross-site scripting (XSS) vulnerability in Arris NVG443B 9.3.0h3d36 allows attackers to execute arbitrary web scripts or HTML via a crafted POST request sent to…
CVE-2022-31793
BF
Bgw320 Firmware
Arris
7.5
18%
Aug 4do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the…
CVE-2022-26994
SF
Sbr-ac1900p Firmware
Arris
9.8
3%
Mar 15Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the…
CVE-2022-26993
SF
Sbr-ac1900p Firmware
Arris
9.8
3%
Mar 15Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the…
CVE-2022-26992
SF
Sbr-ac1900p Firmware
Arris
9.8
3%
Mar 15Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the…
CVE-2022-26991
SF
Sbr-ac1900p Firmware
Arris
9.8
3%
Mar 15Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ntp function via the…
CVE-2022-26990
SF
Sbr-ac1900p Firmware
Arris
9.8
3%
Mar 15Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the firewall-local log…
CVE-2020-8438
RZ
Ruckus Zoneflex R500 Firmware
Arris
7.2
2%
Jan 29Ruckus ZoneFlex R500 104.0.0.0.1347 devices allow an authenticated attacker to execute arbitrary OS commands via the hidden /forms/nslookupHandler form, as demonstrated by the…
CVE-2018-20383
DF
Dg950s Firmware
Arris
9.8
2%
Dec 23ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0…
CVE-2017-9490
TF
Tg1682g Firmware
Arris
8.8
1%
Jul 31The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes via CSRF
CVE-2015-7291
NM
NA Model 862 GW Mono Firmware
Arris
–
1%
Nov 21Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through…
CVE-2015-7290
NM
NA Model 862 GW Mono Firmware
Arris
–
1%
Nov 21Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through…
CVE-2015-7289
NM
NA Model 862 GW Mono Firmware
Arris
–
2%
Nov 21Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes…
CVE-2009-5149
NM
NA Model 862 GW Mono Firmware
Arris
–
2%
Nov 21Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote attackers…
CVE-2014-9406
TT
Touchstone Tg862g/ct Firmware
Arris
–
2%
Dec 18ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier has a default password of password for the admin account, which makes it easier for remote…
CVE-2014-5438
TT
Touchstone Tg862g/ct Firmware
Arris
–
1%
Dec 17Cross-site scripting (XSS) vulnerability in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allows remote authenticated users to inject arbitrary…
CVE-2014-5437
TT
Touchstone Tg862g/ct Firmware
Arris
–
1%
Dec 17Multiple cross-site request forgery (CSRF) vulnerabilities in ARRIS Touchstone TG862G/CT Telephony Gateway with firmware 7.6.59S.CT and earlier allow remote attackers to hijack…
CVE-2014-8425
VF
Vap2500 Firmware
Arris
–
3%
Nov 28The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files
CVE-2014-8424
VF
Vap2500 Firmware
Arris
–
60%
Nov 28ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication
CVE-2014-8423
VF
Vap2500 Firmware
Arris
–
62%
Nov 28Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors
CVE-2014-4863
TD
Touchstone Dg950a Software
Arris
–
16%
Sep 5The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID…
CVE-2007-2796
CC
Cadant C3 Cmts
Arris
–
2%
Jun 12Arris Cadant C3 CMTS allows remote attackers to cause a denial of service (service termination) via a malformed IP packet with an invalid IP option