CVE-2022-45701: Commscope arris tg2482a firmware command injection vulnerability

CCommscope · Arris Tg2482a Firmware

Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

8.8 CVSS 3.1 High EPSS 43% · top 1.3% CWE-77 · Command injection

8.8CVSS 3.1 base score

43%EPSS exploitation probability, 30 days

NoNot in CISA KEV

3Affected product versions listed by NVD

2References, 2 tagged exploit

9 Jul 2026Last modified by NVD

Description

Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

CArris Sbg10 Firmware Commscope CArris Tg2482a Firmware Commscope CArris Tg2492 Firmware Commscope

References

Link	Tags
https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/	ExploitThird Party AdvisoryVDB Entry
https://packetstormsecurity.com/files/171001/Arris-Router-Firmware-9.1.103-Remote-Code-Execution.htmlhttps://github.com/	ExploitThird Party AdvisoryVDB Entry

Track CVE-2022-45701 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Source: NIST National Vulnerability Database (record CVE-2022-45701), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.