Commscope vulnerabilities1 known to be exploited.
Commscope has 66 published vulnerabilities across 80 products in our catalogue. 1 of them is on the list of flaws known to be exploited, so criminals are using them now. The most affected product is Ruckus R710, with 13. If you run Commscope software, patch the exploited flaws first.
The most recent Commscope flaw added to the known-exploited list is CVE-2023-25717, on 12 May 2023. We keep watching the known-exploited list.
Which Commscope products have the most vulnerabilities?
Ruckus R710 leads with 13 published vulnerabilities. Open a product to see its versions and which of its flaws criminals are already using.
Which Commscope vulnerabilities are being exploited?
1 flaw is on the government list of vulnerabilities known to be exploited. These are the ones criminals are using now, so they go first, whatever their severity score says.
- 9.8Multiple Ruckus Wireless Products CSRF and RCE Vulnerability
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component.
Which Commscope flaws are most likely to be used?
Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.
- 98%
Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=admin&password=password$(curl substring.
- 56%CVE-2021-33221Critical
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.
- 45%CVE-2020-26879Critical
Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py.
- 43%CVE-2022-45701High
Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.
- 14%CVE-2021-33216Critical
An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier.
- 12%CVE-2020-26878High
Ruckus through 1.5.1.0.21 is affected by remote command injection.
- 5.1%CVE-2022-27002Critical
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters.
- 3.4%CVE-2022-26997Critical
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter.
All Commscope products we track.
25 products, most vulnerabilities first. Find the ones you run, then open a product to see its versions and exploited flaws.
- Arris Tg1682garris_tg1682g9 vulnerabilities1 version
- Arris Tg1682g Firmwarearris_tg1682g_firmware8 vulnerabilities4 versions
- Arris Tr3300 Firmwarearris_tr3300_firmware8 vulnerabilities1 version
- Ruckus IOT Controllerruckus_iot_controller7 vulnerabilities1 version
- Ruckus Smartzone Firmwareruckus_smartzone_firmware6 vulnerabilities6 versions
- Ruckus Network Directorruckus_network_director3 vulnerabilities20 versions
- Ruckus Zoneflex R500 Firmwareruckus_zoneflex_r500_firmware3 vulnerabilities2 versions
- Arris Surfboard Sb8200 Firmwarearris_surfboard_sb8200_firmware2 vulnerabilities1 version
- Arris Surfboard Sbg6950ac2 Firmwarearris_surfboard_sbg6950ac2_firmware2 vulnerabilities1 version
- Dg3450 Firmwaredg3450_firmware2 vulnerabilities1 version
- Ruckus Vriotruckus_vriot2 vulnerabilities1 version
- Tr4400 Firmwaretr4400_firmware2 vulnerabilities1 version
- Arris Dg950aarris_dg950a1 vulnerability1 version
- Arris Dg950a Firmwarearris_dg950a_firmware1 vulnerability1 version
- Arris Dg950sarris_dg950s1 vulnerability1 version
- Arris Sbg10 Firmwarearris_sbg10_firmware1 vulnerability1 version
- Arris Sbg6580-2arris_sbg6580-21 vulnerability1 version
- Arris Sbg6580-2 Firmwarearris_sbg6580-2_firmware1 vulnerability1 version
- Arris Tg1692a Firmwarearris_tg1692a_firmware1 vulnerability1 version
- Arris Tg2482a Firmwarearris_tg2482a_firmware1 vulnerability1 version
- Arris Tg2492 Firmwarearris_tg2492_firmware1 vulnerability1 version
- Arris Tg2492lg-Na Firmwarearris_tg2492lg-na_firmware1 vulnerability1 version
- Ruckus Cloudpath Enrollment Systemruckus_cloudpath_enrollment_system1 vulnerability24 versions
- Arris Dg950s Firmwarearris_dg950s_firmware0 vulnerabilities2 versions
This directory lists the 25 Commscope products with at least one tracked version, of 80 in our catalogue.
Running Commscope? We'll keep checking.
Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.
- Tell us what you runPick your software from a list, or let us work it out from your website.
- We match it to every flawOver 400,000 published flaws, checked against your list.
- Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
- Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.
Free plan, no card needed. Nothing to install.
1 flaw being exploited affects software Acme tracks
Ruckus Wireless Access Point (AP) software contains an unspecified vulnerability in the web services component. If the web services component is enabled on the AP, an attacker can perform cross-site request forgery (CSRF) or remote code execution (RCE). This vulnerability impacts Ruckus ZoneDirector, SmartZone, and Solo APs.
- Matched to
- Commscope on Acme's software list
- What to do
- Patch first, then check for signs of use
Sent to the alert recipients Acme chose. Also in the app and to Acme's webhook.
Our catalogue lists 66 published vulnerabilities across 80 products and 77 versions from Commscope. The most recent Commscope flaw added to the known-exploited list is CVE-2023-25717, on 12 May 2023.
1 Commscope vulnerability is on the list of flaws known to be exploited. The most recently added is CVE-2023-25717. The full list is on this page.
Ruckus R710, with 13 published vulnerabilities. Its own page lists the ones known to be exploited.
Create a Precursor Intelligence account and track the Commscope products you run. We match them against every published flaw, give each one a risk score from 0 to 100 and tell you as soon as we spot one that affects you, by email, in the app or by webhook.