CVE-2024-5195

Name of the Vulnerable Software and Affected Versions Arris VAP2500 version 08.50

Description A critical issue affects some unknown functionality of the file /diag s.php. The manipulation of the customer info argument leads to command injection. The attack can be launched remotely.

Recommendations For Arris VAP2500 version 08.50, as a temporary workaround, consider restricting access to the /diag s.php file until a patch is available. Avoid using the customer info argument in the affected file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.