Arris Vip1113
3 CVEs affecting Arris Vip1113. Latest disclosed: 2025-06-02. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-49163 | Medium | 6.7 | 2025-06-02 | Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow booting an arbitrary image via a crafted /usr/bin/gunzip file. |
CVE-2025-49162 | Medium | 6.4 | 2025-06-02 | Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to c… |
CVE-2025-49164 | Medium | 4.3 | 2025-06-02 | Arris VIP1113 devices through 2025-05-30 with KreaTV SDK have a firmware decryption key of cd1c2d78f2cba1f73ca7e697b4a485f49a8a7d0c8b0fdc9f51ced50f2530668a. |