CVE-2025-49162

Medium

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character…

mitre·CWE-424·Published 2025-06-02

CVSS

6.4

EPSS

0.00

KEV

Exploits

cve.orgen

185 chars

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename.

NVDen

185 chars

Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename.

Los dispositivos Arris VIP1113 hasta el 30/05/2025 con KreaTV SDK permiten la sobrescritura de archivos a través de TFTP porque un nombre de archivo remoto con un carácter de espacio permite que un atacante controle el nombre de archivo local.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.4	—	—	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	cve.org	6.4	—	—	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.4	0.5	5.9	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H