CVE-2021-41552

Published: Feb 15, 2022Modified: Jun 17, 2026

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

CommScope SURFboard SBG6950AC2 9.1.103AA23 devices allow Command Injection.

Affected (5)

Products: Commscope: Arris Surfboard Sbg6950ac2 Firmware, Arris Surfboard Sbg7400ac2 Firmware, Arris Surfboard Sbg7580ac Firmware, Arris Surfboard Sbg7600ac2 Firmware, Arris Surfboard Sbg10 Firmware

5 products

Arris Surfboard Sbg6950ac2 Firmware

Arris Surfboard Sbg7400ac2 Firmware

Arris Surfboard Sbg7580ac Firmware

Arris Surfboard Sbg7600ac2 Firmware

Arris Surfboard Sbg10 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Arris Surfboard Sbg6950ac2 Firmware	Version 9.1.103aa23

Running on/with	Platform Versions
Commscope Arris Surfboard Sbg6950ac2	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Arris Surfboard Sbg7400ac2 Firmware	All versions

Running on/with	Platform Versions
Commscope Arris Surfboard Sbg7400ac2	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Arris Surfboard Sbg7580ac Firmware	All versions

Running on/with	Platform Versions
Commscope Arris Surfboard Sbg7580ac	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Arris Surfboard Sbg7600ac2 Firmware	All versions

Running on/with	Platform Versions
Commscope Arris Surfboard Sbg7600ac2	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Commscope Arris Surfboard Sbg10 Firmware	All versions

Running on/with	Platform Versions
Commscope Arris Surfboard Sbg10	All versions

Related CWEs

Improper Neutralization of Special Elements used in a Command ('Command Injection')

The product constructs all or part of a command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended command when it is sent to a downstream component.

References (4)

https://arris.my.salesforce.com/sfc/p/#30000000kUAL/a/4Q000000Raud/cRx46eSijpwhTpoeWSgB1dQehSMwFrLV1gurcqI35QY

Source: cve@mitre.org

Third Party Advisory

https://commscope.com

Source: cve@mitre.org

Vendor Advisory

https://arris.my.salesforce.com/sfc/p/#30000000kUAL/a/4Q000000Raud/cRx46eSijpwhTpoeWSgB1dQehSMwFrLV1gurcqI35QY

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://commscope.com

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.