File Overwrite Vulnerability in Arris VIP1113 Devices

CVE-2025-49162

What is CVE-2025-49162?

The Arris VIP1113 devices exploit a vulnerability within the KreaTV SDK that allows attackers to perform unauthorized file overwrites via TFTP. By sending a specially crafted remote filename containing a space character, the attacker can manipulate the local filename to overwrite critical system files, potentially leading to system disruption or unauthorized access.

References