AArris

Products

Exploited and recent CVEs

• CVE-2025-49164 Medium 4.3 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f51ced50f2530668a. 0.2%
• CVE-2025-49163 Medium 6.7 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file. 0.2%
• CVE-2025-49162 Medium 6.4 Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename. 0.2%
• CVE-2024-5196 Medium 4.7 Arris VAP2500 tools_command.php command injection 23.6%
• CVE-2024-5195 Medium 4.7 Arris VAP2500 diag_s.php command injection 23.6%
• CVE-2024-5194 Medium 4.7 Arris VAP2500 assoc_table.php command injection 3.6%
• CVE-2024-23618 Critical 9.6 Arris SURFboard SBG6950AC2 Arbitrary Code Execution Vulnerability 1.2%