ARRIS VAP2500 before FW08.41 does not properly validate passwords, which allows remote attackers to bypass authentication.
mitre·CWE-287·Published 2014-11-28