arris vulnerabilities and exploits

(subscribe to this query)

do_request in request.c in muhttpd prior to 1.1.7 allows remote malicious users to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG...

Inglorion Muhttpd Arris Nvg443 Firmware -Arris Nvg599 Firmware -Arris Nvg589 Firmware -Arris Nvg510 Firmware -Arris Bgw210 Firmware -Arris Bgw320 Firmware -

2 Github repositories

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have a hardcoded administrator password derived from a serial number, which makes it easier for remote malicious users to obtain access via the web management interface, SSH, TELNET,...

Arris Na Model 862 Gw Mono Firmware Ts0703128 100611 Arris Na Model 862 Gw Mono Firmware Ts0703135 112211 Arris Na Model 862 Gw Mono Firmware Ts0705125d 031115 Arris Na Model 862 Gw Mono Firmware Ts070593c 073013 Arris Na Model 862 Gw Mono Firmware Ts0705125 062314

Cross-site scripting (XSS) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote malicious users to inject arbitrary web script or HTML via the pwd parameter.

Arris Na Model 862 Gw Mono Firmware Ts0705125d 031115 Arris Na Model 862 Gw Mono Firmware Ts0705125 062314 Arris Na Model 862 Gw Mono Firmware Ts070593c 073013 Arris Na Model 862 Gw Mono Firmware Ts0703128 100611 Arris Na Model 862 Gw Mono Firmware Ts0703135 112211

Cross-site request forgery (CSRF) vulnerability in adv_pwd_cgi in the web management interface on Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 allows remote malicious users to hijack the authentication of arbitrary users.

Arris Na Model 862 Gw Mono Firmware Ts0703135 112211 Arris Na Model 862 Gw Mono Firmware Ts0705125 062314 Arris Na Model 862 Gw Mono Firmware Ts0703128 100611 Arris Na Model 862 Gw Mono Firmware Ts0705125d 031115 Arris Na Model 862 Gw Mono Firmware Ts070593c 073013

Arris DG860A, TG862A, and TG862G devices with firmware TS0703128_100611 through TS0705125D_031115 have predictable technician passwords, which makes it easier for remote malicious users to obtain access via the web management interface, related to a "password of the day"...

Arris Na Model 862 Gw Mono Firmware Ts0705125d 031115 Arris Na Model 862 Gw Mono Firmware Ts070593c 073013 Arris Na Model 862 Gw Mono Firmware Ts0703135 112211 Arris Na Model 862 Gw Mono Firmware Ts0705125 062314 Arris Na Model 862 Gw Mono Firmware Ts0703128 100611

An issue exists on ARRIS TG852G, TG862G, and TG1672G devices. A remote attacker (in proximity to a Wi-Fi network) can derive the default WPA2-PSK value by observing a beacon frame.

Arris Tg852g Firmware -Arris Tg862g Firmware -Arris Tg1672g Firmware -

The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote malicious users to obtain sensitive password, key, and SSID information via an SNMP request.

Arris Touchstone Dg950a Software 7.10.131 Arris Touchstone Dg950a -

Arris DG860A and DG1670A devices have predictable default WPA2 PSKs that could lead to unauthorized remote access. (They use the first 6 characters of the SSID and the last 6 characters of the BSSID, decrementing the last digit.)

Arris Dg860a Firmware -Arris Dg1670a Firmware Ts0901203b6 020420 16xx.gw Pc20 Tw

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pppoe function via the pppoeUserName, pppoePassword, and pppoe_Service parameters. This vulnerability allows malicious users to...

Arris Sbr-ac1900p Firmware 1.0.7-b05 Arris Sbr-ac3200p Firmware 1.0.7-b05 Arris Sbr-ac1200p Firmware 1.0.5-b05

Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the pptpUserName and pptpPassword parameters. This vulnerability allows malicious users to execute arbitrary ...

Arris Sbr-ac1900p Firmware 1.0.7-b05 Arris Sbr-ac3200p Firmware 1.0.7-b05 Arris Sbr-ac1200p Firmware 1.0.5-b05

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook