Arcadyan develops a narrow line of residential and small-business networking devices such as the VRV9506 router and Swisscom Internet Box, which serve as gateway appliances for broadband access and local network connectivity. The observed vulnerability signal centers on authentication and cryptographic weaknesses—cleartext transmission of sensitive information, improper access control, and cross-site scripting—characteristic of web-management interfaces on edge devices that require hardened credential and session handling. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Arcadyan over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2016-10042HIGH Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table v | Jun 29, 2017 | 7.5 | 24 | NO | NO |
CVE-2020-9420MEDIUM The login password of the web administrative dashboard in Arcadyan Wifi routers VRV9506JAC23 is sent in cleartext, allowing an attacker to sniff and intercept traffic to learn the | Dec 14, 2022 | 6.5 | 23 | NO | NO |
CVE-2020-9419MEDIUM Multiple stored cross-site scripting (XSS) vulnerabilities in Arcadyan Wifi routers VRV9506JAC23 allow remote attackers to inject arbitrary web script or HTML via the hostName and | Dec 14, 2022 | 5.4 | 20 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Arcadyan.
Media articles that mention a CVE ID that affects a product developed by Arcadyan — matched by CVE ID, not by vendor name.