Commscope Arris Tr3300 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Commscope Arris Tr3300 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (8)

• CVE-2022-26995 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip…
• CVE-2022-26996 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username…
• CVE-2022-26997 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter. This…
• CVE-2022-26998 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin…
• CVE-2022-26999 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat…
• CVE-2022-27000 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the…
• CVE-2022-27001 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. This…
• CVE-2022-27002 — CVSS 9.8 (critical): Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd…