CVE-2024-5195: Arris VAP2500 Firmware

High severity, CVSS 7.2. EPSS: 23.6% chance of exploitation in the next 30 days.

A vulnerability was found in Arris VAP2500 08.50. It has been rated as critical. Affected by this issue is some unknown functionality of the file /diag_s.php. The manipulation of the argument customer_info leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-265832.

Affected products

• Arris VAP2500 Firmware: version 08.50 only

Published 2024-05-22. Last modified 2026-06-17.