CommScope, Inc.

Records55All Threatist records

Exploited (KEV)1In CISA KEV

CVSS critical26CVSS 9.0–10.0

CVSS high18CVSS 7.0–8.9

Exploited now

CommScope, Inc. records in CISA KEV

TI-2023-10993 Multiple Ruckus Wireless Products CSRF and RCE Vulnerability CRITICAL 100KEV 2023-05-12

Components

Products in the NVD configurations · select one to filter the records

Ruckus Network Director 9 records HIGH Arris Tg1682g Firmware 8 records MEDIUM Arris Tr3300 Firmware 8 records MEDIUM Ruckus Iot Controller 7 records HIGH Ruckus Smartzone Firmware 6 records CRITICAL Ruckus Zoneflex R500 Firmware 3 records LOW Arris Surfboard Sb8200 Firmware 2 records LOW Arris Surfboard Sbg6950ac2 Firmware 2 records MEDIUM

Records

8 records in Arris Tr3300 Firmware · all components

TI-2022-10221 CVE-2022-27002 · GHSA-9q46-wmvv-f799

Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the…

MEDIUM 50

Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0507 Published 2022-03-15 No fix listed CWE-77

TI-2022-10220 CVE-2022-27001 · GHSA-jjh3-hp2p-4xpp

Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the…

MEDIUM 48

Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2022-03-15 No fix listed CWE-77

TI-2022-10219 CVE-2022-27000 · GHSA-p828-566q-jjx7

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the…

MEDIUM 48

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2022-03-15 No fix listed CWE-77

TI-2022-10218 CVE-2022-26999 · GHSA-cpmj-6qjj-6v32

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the…

MEDIUM 48

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_stat, and wan_dns1_stat parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2022-03-15 No fix listed CWE-77

TI-2022-10217 CVE-2022-26998 · GHSA-xq54-79cv-mcq9

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the…

MEDIUM 48

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2022-03-15 No fix listed CWE-77

TI-2022-10216 CVE-2022-26997 · GHSA-7qm6-4m59-gwjc

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the…

MEDIUM 48

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0342 Published 2022-03-15 No fix listed CWE-77

TI-2022-10215 CVE-2022-26996 · GHSA-7228-2475-6w24

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the…

MEDIUM 47

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd, and pppoe_servicename parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02851 Published 2022-03-15 No fix listed CWE-77

TI-2022-10214 CVE-2022-26995 · GHSA-vhxx-3297-x3w7

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the…

MEDIUM 47

Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_fix_gw, and wan_dns1_stat parameters.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02851 Published 2022-03-15 No fix listed CWE-77

Open these records in search →