Commscope

15 CVEs across 96 Commscope products. Browse Commscope vulnerabilities, severities, and proof-of-concept exploits.

Commscope products with known CVEs

ProductCVEs
Ruckus C11013
Ruckus E51013
Ruckus H32013
Ruckus H35013
Ruckus H51013
Ruckus M51013
Ruckus R32013
Ruckus R51013
Ruckus R56013
Ruckus R61013
Ruckus R71013
Ruckus R72013
Ruckus R73013
Ruckus R75013
Ruckus T310c13
Ruckus T310n13
Ruckus T310s13
Ruckus T350se13
Ruckus T75013
Ruckus T750se13
Arris Tg1682g9
Ruckus Network Director9
Arris Tg1682g Firmware8
Arris Tr33008
Arris Tr3300 Firmware8
Ruckus H5508
Ruckus M510-Jp8
Ruckus R3108
Ruckus R3508
Ruckus R350e8
Ruckus R5508
Ruckus R6508
Ruckus R6708
Ruckus R7608
Ruckus R7708
Ruckus R8508
Ruckus T350c8
Ruckus T350d8
Ruckus T6108
Ruckus T6708
Ruckus T7108
Ruckus T710s8
Ruckus T811-Cm8
Ruckus T811-Cm \(Non-Sfp\)8
Zonedirector 12008
Ruckus Iot Controller7
Ruckus Smartzone Firmware6
Ruckus Smartzone 1005
Ruckus Smartzone 100-D5
Ruckus Smartzone 1445
Commscope CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2025-67305Critical9.82026-02-19In RUCKUS Network Director (RND) < 4.5.0.56, the OVA appliance contains hardcoded SSH keys for the postgres user. These keys are identical across all deploymen…
CVE-2025-67304Critical9.82026-02-19In Ruckus Network Director (RND) < 4.5.0.54, the OVA appliance contains hardcoded credentials for the ruckus PostgreSQL database user. In the default configura…
CVE-2025-44963Critical9.02025-08-04RUCKUS Network Director (RND) before 4.5 allows spoofing of an administrator JWT by an attacker who knows the hardcoded value of a certain secret key.
CVE-2025-44962Medium5.02025-08-04RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows ../ directory traversal to read files.
CVE-2025-44961Critical9.92025-08-04In RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build, OS command injection can occur via an IP address field provided by an authenticated user.
CVE-2025-44960High8.52025-08-04RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build allows OS command injection via a certain parameter in an API route.
CVE-2025-44958Medium5.32025-08-04RUCKUS Network Director (RND) before 4.5 stores passwords in a recoverable format.
CVE-2025-44957High8.52025-08-04Ruckus SmartZone (SZ) before 6.1.2p3 Refresh Build allows authentication bypass via a valid API key and crafted HTTP headers.
CVE-2025-44954Critical9.02025-08-04RUCKUS SmartZone (SZ) before 6.1.2p3 Refresh Build has a hardcoded SSH private key for a root-equivalent user account.
CVE-2025-44955High8.82025-08-04RUCKUS Network Director (RND) before 4.5 allows jailed users to obtain root access vis a weak, hardcoded password.
CVE-2025-46123High7.22025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where the…
CVE-2025-46122Critical9.12025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the authenticated diagnostics API endpoint `/admin/_cm…
CVE-2025-46121Critical9.82025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, where the functions `stamgr_cfg_adpt_addStaFavourite` and `s…
CVE-2025-46120Critical9.82025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where a pa…
CVE-2025-46119Medium6.32025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.27 and 200.18.7.1.323, and in Ruckus ZoneDirector prior to 10.5.1.0.282, where an a…
CVE-2025-46118Medium5.32025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139 and in Ruckus ZoneDirector prior to 10.5.1.0.279, where hard-…
CVE-2025-46117Critical9.12025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where a hi…
CVE-2025-46116High8.82025-07-21An issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139, and in Ruckus ZoneDirector prior to 10.5.1.0.279, where an a…
CVE-2024-23618Critical9.62024-01-26An arbitrary code execution vulnerability exists in Arris SURFboard SGB6950AC2 devices. An unauthenticated attacker can exploit this vulnerability to achieve c…
CVE-2023-49225Medium6.12023-12-07A cross-site-scripting vulnerability exists in Ruckus Access Point products (ZoneDirector, SmartZone, and AP Solo). If this vulnerability is exploited, an arbi…
CVE-2023-45992Critical9.62023-10-19A vulnerability in the web-based interface of the RUCKUS Cloudpath product on version 5.12 build 5538 or before to could allow a remote, unauthenticated attack…
CVE-2023-27572Medium6.12023-04-15An issue was discovered in CommScope Arris DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. A reflected XSS vulnerability was discovered in the https_red…
CVE-2023-27571Medium5.32023-04-15An issue was discovered in DG3450 Cable Gateway AR01.02.056.18_041520_711.NCS.10. The troubleshooting_logs_download.php log file download functionality does no…
CVE-2022-45701High8.82023-02-17Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.
CVE-2023-25717Critical9.82023-02-13Ruckus Wireless Admin through 10.4 allows Remote Code Execution via an unauthenticated HTTP GET Request, as demonstrated by a /forms/doLogin?login_username=adm…
CVE-2022-27002Critical9.82022-03-15Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters…
CVE-2022-27001Critical9.82022-03-15Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. This vulnerability allows at…
CVE-2022-27000Critical9.82022-03-15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_…
CVE-2022-26999Critical9.82022-03-15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_…
CVE-2022-26998Critical9.82022-03-15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter. This vulnerabil…
CVE-2022-26997Critical9.82022-03-15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the upnp function via the upnp_ttl parameter. This vulnerability allows att…
CVE-2022-26996Critical9.82022-03-15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pppoe function via the pppoe_username, pppoe_passwd, and pppoe_servicen…
CVE-2022-26995Critical9.82022-03-15Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the pptp (wan_pptp.html) function via the pptp_fix_ip, pptp_fix_mask, pptp_…
CVE-2021-41552High8.82022-02-15CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection.
CVE-2021-20119High7.12021-11-09The password change utility for the Arris SurfBoard SB8200 can have safety measures bypassed that allow any logged-in user to change the administrator password.
CVE-2021-20120High8.82021-10-21The administration web interface for the Arris Surfboard SB8200 lacks any protections against cross-site request forgery attacks. This means that an attacker c…
CVE-2021-33221Critical9.82021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Unauthenticated API Endpoints.
CVE-2021-33220High7.82021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. Hard-coded API Keys exist.
CVE-2021-33219Critical9.82021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded Web Application Administrator Passwords for the admin and…
CVE-2021-33218Critical9.82021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. There are Hard-coded System Passwords that provide shell access.
CVE-2021-33217High8.82021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The Web Application allows Arbitrary Read/Write actions by authenticated users…
CVE-2021-33216Critical9.82021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. An Undocumented Backdoor exists, allowing shell access via a developer account.
CVE-2021-33215Medium4.32021-07-07An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal.
CVE-2020-26879Critical9.82020-10-26Ruckus vRioT through 1.5.1.0.21 has an API backdoor that is hardcoded into validate_token.py. An unauthenticated attacker can interact with the service API by…
CVE-2020-26878High8.82020-10-26Ruckus through 1.5.1.0.21 is affected by remote command injection. An authenticated user can submit a query to the API (/service/v1/createUser endpoint), injec…
CVE-2020-8830High8.82020-05-05CSRF in login.asp on Ruckus devices allows an attacker to access the panel, and use SSRF to perform scraping or other analysis via the SUBCA-1 field on the Wir…
CVE-2020-8033Medium6.12020-05-05Ruckus R500 3.4.2.0.384 devices allow XSS via the index.asp Device Name field.
CVE-2020-7983High8.12020-05-05A CSRF issue in login.asp on Ruckus R500 3.4.2.0.384 devices allows remote attackers to access the panel or conduct SSRF attacks.
CVE-2020-9476High7.52020-03-04ARRIS TG1692A devices allow remote attackers to discover the administrator login name and password by reading the /login page and performing base64 decoding.
CVE-2019-15806Critical9.82019-08-29CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they i…
CVE-2019-15805Critical9.82019-08-29CommScope ARRIS TR4400 devices with firmware through A1.00.004-180301 are vulnerable to an authentication bypass to the administrative interface because they i…
CVE-2018-20386Critical9.82018-12-23ARRIS SBG6580-2 D30GW-SEAEAGLE-1.5.2.5-GA-00-NOSH devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4…
CVE-2018-20383Critical9.82018-12-23ARRIS DG950A 7.10.145 and DG950S 7.10.145.EURO devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.1.4.1…
CVE-2018-17555High7.52018-09-26The web component on ARRIS TG2492LG-NA 061213 devices allows remote attackers to obtain sensitive information via the /snmpGet oids parameter.
CVE-2018-10990High8.02018-05-14On Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices, a logout action does not immediately destroy all state on the device related to the validity o…
CVE-2018-10989Medium6.62018-05-14Arris Touchstone Telephony Gateway TG1682G 9.1.103J6 devices are distributed by some ISPs with a default password of "password" for the admin account that is u…
CVE-2017-16836Medium6.12017-11-16Arris TG1682G devices with Comcast TG1682_2.0s7_PRODse 10.0.59.SIP.PC20.CT software allow Unauthenticated Stored XSS via the actionHandler/ajax_managed_service…
CVE-2017-14117Medium5.92017-09-03The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures an unauthenticated proxy service…
CVE-2017-14116High8.12017-09-03The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG599 device, when IP Passthrough mode is not used, configures WAN access to a caserver https service with…
CVE-2017-14115High8.12017-09-03The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589 and NVG599 devices, when IP Passthrough mode is not used, configures ssh-permanent-enable WAN SSH log…
CVE-2017-10793High8.12017-09-03The AT&T U-verse 9.2.2h0d83 firmware for the Arris NVG589, NVG599, and unspecified other devices, when IP Passthrough mode is not used, configures an sbdc.ha W…
CVE-2017-9521Critical9.82017-07-31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217…
CVE-2017-9492High7.52017-07-31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217…
CVE-2017-9491Medium5.32017-07-31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217…
CVE-2017-9490High8.82017-07-31The Comcast firmware on Arris TG1682G (eMTA&DOCSIS version 10.0.132.SIP.PC20.CT, software version TG1682_2.2p7s2_PROD_sey) devices allows configuration changes…
CVE-2017-9489High8.82017-07-31The Comcast firmware on Cisco DPC3939B (firmware version dpc3939b-v303r204217-150321a-CMCST) devices allows configuration changes via CSRF.
CVE-2017-9476Medium6.52017-07-31The Comcast firmware on Cisco DPC3939 (firmware version dpc3939-P20-18-v303r20421733-160420a-CMCST); Cisco DPC3939 (firmware version dpc3939-P20-18-v303r204217…
CVE-2014-37782014-06-19Multiple cross-site request forgery (CSRF) vulnerabilities in goform/RgDdns in ARRIS (formerly Motorola) SBG901 SURFboard Wireless Cable Modem allow remote att…