Arris Vap2500 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Arris Vap2500 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2014-8423 — CVSS 10.0 (critical): Unspecified vulnerability in the management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to execute arbitrary commands…
• CVE-2014-8424 — CVSS 7.8 (high): ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.
• CVE-2014-8425 — CVSS 7.8 (high): The management portal in ARRIS VAP2500 before FW08.41 allows remote attackers to obtain credentials by reading the configuration files.
• CVE-2024-5194 — CVSS 4.7 (medium): A vulnerability was found in Arris VAP2500 08.50. It has been declared as critical. Affected by this vulnerability is an unknown…
• CVE-2024-5195 — CVSS 4.7 (medium): A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of…
• CVE-2024-5196 — CVSS 4.7 (medium): A vulnerability classified as critical has been found in Arris VAP2500 08.50. This affects an unknown part of the file /tools_command.php…