PT-2014-8517

CVE-2014-8423

·

Published

2014-11-25

·

Updated

2014-11-28

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions ARRIS VAP2500 versions prior to FW08.41
Description The issue concerns an unspecified vulnerability in the management portal of the ARRIS VAP2500. This vulnerability allows remote attackers to execute arbitrary commands. The exact vectors used for the attack are not specified.
Recommendations For ARRIS VAP2500 versions prior to FW08.41, update the firmware to FW08.41 or later to resolve the issue. As a temporary workaround, consider restricting access to the management portal to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ZDI-14-389
Found an issue in the description? Have something to add? Feel free to write us 👾