Arris vulnerabilitiesNone on the known-exploited list.
Arris has 27 published vulnerabilities across 48 products in our catalogue. None of them is on the list of flaws known to be exploited today. The most affected product is Vap2500 Firmware, with 6. If you run Arris software, patch the exploited flaws first.
We keep watching the known-exploited list.
Which Arris products have the most vulnerabilities?
Vap2500 Firmware leads with 6 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Arris vulnerabilities are being exploited?
This is the list that matters most: flaws criminals are using now.
None of Arris's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.
Which Arris flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 62%CVE-2014-8423Critical
Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.
- 60%CVE-2014-8424High
ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.
- 24%CVE-2024-5196Medium
A vulnerability classified as critical has been found in Arris VAP2500 08.50.
- 24%CVE-2024-5195Medium
A vulnerability was found in Arris VAP2500 08.50.
- 17%CVE-2022-31793High
do_request in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem.
- 16%CVE-2014-4863Medium
The Arris Touchstone DG950A cable modem with software 7.10.131 has an SNMP community of public, which allows remote attackers to obtain sensitive password, key, and SSID information via an SNMP request.
- 3.6%CVE-2024-5194Medium
A vulnerability was found in Arris VAP2500 08.50.
- 3.1%CVE-2014-8425High
The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files.
- 3.0%CVE-2022-26994Critical
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the pptp function via the pptpUserName and pptpPassword parameters.
- 2.9%CVE-2022-26992Critical
Arris routers SBR-AC1900P 1.0.7-B05, SBR-AC3200P 1.0.7-B05 and SBR-AC1200P 1.0.5-B05 were discovered to contain a command injection vulnerability in the ddns function via the DdnsUserName, DdnsHostName, and...
All Arris products we track.
15 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Vap2500 Firmwarevap2500_firmware6 vulnerabilities2 versions
- Sbr-Ac1200p Firmwaresbr-ac1200p_firmware5 vulnerabilities1 version
- Sbr-Ac1900p Firmwaresbr-ac1900p_firmware5 vulnerabilities1 version
- Sbr-Ac3200p Firmwaresbr-ac3200p_firmware5 vulnerabilities1 version
- Na Model 862 Gw Mono Firmwarena_model_862_gw_mono_firmware4 vulnerabilities5 versions
- Touchstone Tg862g/ct Firmwaretouchstone_tg862g\/ct_firmware3 vulnerabilities1 version
- Dg1670a Firmwaredg1670a_firmware1 vulnerability1 version
- Dg950s Firmwaredg950s_firmware1 vulnerability1 version
- Nvg443b Firmwarenvg443b_firmware1 vulnerability1 version
- Ruckus Zoneflex R500 Firmwareruckus_zoneflex_r500_firmware1 vulnerability1 version
- Tg1682g Firmwaretg1682g_firmware1 vulnerability2 versions
- Touchstone Dg950a Softwaretouchstone_dg950a_software1 vulnerability1 version
- Dg950sdg950s0 vulnerabilities1 version
- Sbg6580-2sbg6580-20 vulnerabilities1 version
- Tg1682gtg1682g0 vulnerabilities1 version
This directory lists the 15 Arris products with at least one tracked version, of 48 in our catalogue.
Running Arris? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 new flaw affects software Acme tracks
Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands via unknown vectors.
- Matched to
- Vap2500 on Acme's software list
- What to do
- Plan in the vendor’s update
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 27 published vulnerabilities across 48 products and 21 versions from Arris.
None of Arris's vulnerabilities is on the list of flaws known to be exploited today.
Vap2500 Firmware, with 6 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Arris products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.