CVE-2025-49162
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local f…
Published: 2025-06-02 · CVSS: 6.4 · CVSS 3.1
Arris VIP1113 devices through 2025-05-30 with KreaTV SDK allow file overwrite via TFTP because a remote filename with a space character allows an attacker to control the local filename.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7