Approved changes feed: RSS · Atom

cpe:2.3:o:commscope:arris_tr3300_firmware:1.0.13:*:*:*:*:*:*:*

part: o version: 1.0.13 update: *

VendorCommscope (eb313045-4870-5e60-bc46-581a488779cc)
ProductArris Tr3300 Firmware (5906a79b-92a4-5ade-945e-728d0a670dc1)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-27002 vulnerable 2026-06-08 05:41:54.747233 Details available
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the ddns function via the ddns_name, ddns_pwd, h_ddns、ddns_host parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:33.000Z
Updated: 2024-08-03T05:18:39.295Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27001 vulnerable 2026-06-08 05:41:54.746824 Details available
Arris TR3300 v1.0.13 were discovered to contain a command injection vulnerability in the dhcp function via the hostname parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:32.000Z
Updated: 2024-08-03T05:18:39.218Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-27000 vulnerable 2026-06-08 05:41:54.746424 Details available
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the time and time zone function via the h_primary_ntp_server, h_backup_ntp_server, and h_time_zone parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:31.000Z
Updated: 2024-08-03T05:18:39.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26999 vulnerable 2026-06-08 05:41:54.745860 Details available
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the static ip settings function via the wan_ip_stat, wan_mask_stat, wan_gw_stat, and wan_dns1_stat parameters. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:31.000Z
Updated: 2024-08-03T05:18:39.261Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26998 vulnerable 2026-06-08 05:41:54.745561 Details available
Arris TR3300 v1.0.13 was discovered to contain a command injection vulnerability in the wps setting function via the wps_enrolee_pin parameter. This vulnerability allows attackers to execute arbitrary commands via a crafted request.
Published: 2022-03-15T21:56:30.000Z
Updated: 2024-08-03T05:18:39.298Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26997 vulnerable 2026-06-08 05:41:54.745247 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26996 vulnerable 2026-06-08 05:41:54.744881 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-26995 vulnerable 2026-06-08 05:41:54.743667 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.