Login Request a demo
CO
Vendor
Commscope
24 products with CVEs on record
64
CVEs
1
On KEV
0
New 30D
Products
RS
Ruckus Smartzone Firmware
Commscope
9.8
6 CVEs1 on KEV0 new
RN
Ruckus Network Director
Commscope
9.8
9 CVEs0 on KEV0 new
AT
Arris Tg1682g Firmware
Commscope
9.8
8 CVEs0 on KEV0 new
AT
Arris Tr3300 Firmware
Commscope
9.8
8 CVEs0 on KEV0 new
RI
Ruckus Iot Controller
Commscope
9.8
7 CVEs0 on KEV0 new
RZ
Ruckus Zoneflex R500 Firmware
Commscope
8.8
3 CVEs0 on KEV0 new
AS
Arris Surfboard Sb8200 Firmware
Commscope
8.8
2 CVEs0 on KEV0 new
AS
Arris Surfboard Sbg6950ac2 Firmware
Commscope
9.8
2 CVEs0 on KEV0 new
DF
Dg3450 Firmware
Commscope
6.1
2 CVEs0 on KEV0 new
RV
Ruckus Vriot
Commscope
9.8
2 CVEs0 on KEV0 new
TF
Tr4400 Firmware
Commscope
9.8
2 CVEs0 on KEV0 new
AD
Arris Dg950a Firmware
Commscope
9.8
1 CVEs0 on KEV0 new
AS
Arris Sbg10 Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AS
Arris Sbg6580-2 Firmware
Commscope
9.8
1 CVEs0 on KEV0 new
AS
Arris Sbg901
Commscope
–
1 CVEs0 on KEV0 new
AS
Arris Surfboard Sbg10 Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AS
Arris Surfboard Sbg7400ac2 Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AS
Arris Surfboard Sbg7580ac Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AS
Arris Surfboard Sbg7600ac2 Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AT
Arris Tg1692a Firmware
Commscope
7.5
1 CVEs0 on KEV0 new
AT
Arris Tg2482a Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AT
Arris Tg2492 Firmware
Commscope
8.8
1 CVEs0 on KEV0 new
AT
Arris Tg2492lg-na Firmware
Commscope
7.5
1 CVEs0 on KEV0 new
RC
Ruckus Cloudpath Enrollment System
Commscope
9.6
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2025-67304
RN
Ruckus Network Director
Commscope
9.8
1%
Feb 19In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user
CVE-2025-67305
RN
Ruckus Network Director
Commscope
9.8
1%
Feb 19In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user
CVE-2025-44962
RS
Ruckus Smartzone Firmware
Commscope
4.3
1%
Aug 4RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files
CVE-2025-44961
RS
Ruckus Smartzone Firmware
Commscope
8.8
2%
Aug 4In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user
CVE-2025-44960
RS
Ruckus Smartzone Firmware
Commscope
8.8
2%
Aug 4RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route
CVE-2025-44958
RN
Ruckus Network Director
Commscope
7.5
0%
Aug 4RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format
CVE-2025-44957
RS
Ruckus Smartzone Firmware
Commscope
8.8
1%
Aug 4Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers
CVE-2025-44954
RS
Ruckus Smartzone Firmware
Commscope
9.8
1%
Aug 4RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account
CVE-2025-44955
RN
Ruckus Network Director
Commscope
8.8
0%
Aug 4RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password
CVE-2025-44963
RN
Ruckus Network Director
Commscope
8.1
1%
Aug 4RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key
CVE-2024-23618
AS
Arris Surfboard Sbg6950ac2 Firmware
Commscope
9.8
1%
Jan 25Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability
CVE-2023-45992
RC
Ruckus Cloudpath Enrollment System
Commscope
9.6
1%
Oct 19A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attacker to execute…
CVE-2023-27572
DF
Dg3450 Firmware
Commscope
6.1
1%
Apr 15An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10
CVE-2023-27571
DF
Dg3450 Firmware
Commscope
5.3
1%
Apr 15An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10
CVE-2022-45701
AT
Arris Tg2492 Firmware
Commscope
8.8
43%
Feb 17Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature
CVE-2023-25717
In wildKEV
RS
Ruckus Smartzone Firmware
Commscope
9.8
98%
Feb 13Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
CVE-2022-27002
AT
Arris Tr3300 Firmware
Commscope
9.8
5%
Mar 15Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters
CVE-2022-27001
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter
CVE-2022-27000
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_server, and…
CVE-2022-26999
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_stat, and…
CVE-2022-26998
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter
CVE-2022-26997
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter
CVE-2022-26996
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd, and pppoe_servicename parameters
CVE-2022-26995
AT
Arris Tr3300 Firmware
Commscope
9.8
3%
Mar 15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, and…
CVE-2021-41552
AS
Arris Surfboard Sbg7600ac2 Firmware
Commscope
8.8
1%
Feb 15CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection
CVE-2021-20119
AS
Arris Surfboard Sb8200 Firmware
Commscope
7.1
0%
Nov 9The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password
CVE-2021-20120
AS
Arris Surfboard Sb8200 Firmware
Commscope
8.8
1%
Oct 21The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks
CVE-2021-33221
RI
Ruckus Iot Controller
Commscope
9.8
56%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2021-33220
RI
Ruckus Iot Controller
Commscope
7.8
0%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2021-33219
RI
Ruckus Iot Controller
Commscope
9.8
2%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2021-33218
RI
Ruckus Iot Controller
Commscope
9.8
2%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2021-33217
RI
Ruckus Iot Controller
Commscope
8.8
1%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2021-33216
RI
Ruckus Iot Controller
Commscope
9.8
14%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2021-33215
RI
Ruckus Iot Controller
Commscope
4.3
1%
Jul 7An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier
CVE-2020-26879
RV
Ruckus Vriot
Commscope
9.8
44%
Oct 26Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py
CVE-2020-26878
RV
Ruckus Vriot
Commscope
8.8
12%
Oct 26Ruckus through 1.5.1.0.21 is affected by remote command injection
CVE-2020-8830
RZ
Ruckus Zoneflex R500 Firmware
Commscope
8.8
1%
May 5CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wireless Admin screen
CVE-2020-8033
RZ
Ruckus Zoneflex R500 Firmware
Commscope
6.1
1%
May 5Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field
CVE-2020-7983
RZ
Ruckus Zoneflex R500 Firmware
Commscope
8.1
1%
May 5A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks
CVE-2020-9476
AT
Arris Tg1692a Firmware
Commscope
7.5
1%
Mar 4ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding
CVE-2019-15806
TF
Tr4400 Firmware
Commscope
9.8
1%
Aug 29CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current…
CVE-2019-15805
TF
Tr4400 Firmware
Commscope
9.8
1%
Aug 29CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they include the current…
CVE-2018-20386
AS
Arris Sbg6580-2 Firmware
Commscope
9.8
2%
Dec 23ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and…
CVE-2018-20383
AD
Arris Dg950a Firmware
Commscope
9.8
2%
Dec 23ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1.4491.2.4.1.1.6.1.2.0…
CVE-2018-17555
AT
Arris Tg2492lg-na Firmware
Commscope
7.5
2%
Sep 26The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter
CVE-2018-10990
AT
Arris Tg1682g Firmware
Commscope
8.0
1%
May 14On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity of the "credential"…
CVE-2018-10989
AT
Arris Tg1682g Firmware
Commscope
6.6
1%
May 14Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of "password" for the admin account that is used over an…
CVE-2017-16836
AT
Arris Tg1682g Firmware
Commscope
6.1
2%
Nov 16Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_services.php service…
CVE-2017-9521
AT
Arris Tg1682g Firmware
Commscope
9.8
3%
Jul 31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST);…
CVE-2017-9492
AT
Arris Tg1682g Firmware
Commscope
7.5
2%
Jul 31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST);…
CVE-2017-9491
AT
Arris Tg1682g Firmware
Commscope
5.3
1%
Jul 31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST);…
CVE-2017-9489
AT
Arris Tg1682g Firmware
Commscope
8.8
1%
Jul 31The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF
CVE-2017-9476
AT
Arris Tg1682g Firmware
Commscope
6.5
2%
Jul 31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST);…
CVE-2014-3778
AS
Arris Sbg901
Commscope
–
2%
Jun 19Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote attackers to hijack the…