CRITICAL🇵🇱 Wersja polska

CVE-2019-19495

CVSS 9.8v3.1pub. 2020-01-08upd. 2024-11-21

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing external access to a root shell.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Technicolor Tc7230 Steb

    HW
    Technicolor
    all versions

  • Technicolor Tc7230 Steb Firmware

    OS
    Technicolor
    0.1.25
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2019-19494HIGH8.8same product

Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote...

CVE-2020-10376CRITICAL9.8PL ✓same vendor

Technicolor TC7337NET — przechwycenie hasła przez nieszyfrowany nagłówek HTTP Basic Auth

CVE-2018-20440CRITICAL9.8PL ✓same vendor

Ujawnienie danych uwierzytelniających Wi-Fi przez SNMP w Technicolor CWA0101

CVE-2018-20438CRITICAL9.8PL ✓same vendor

Technicolor TC7110.AR — ujawnienie danych Wi-Fi przez SNMP

CVE-2018-20439CRITICAL9.8PL ✓same vendor

Technicolor DPC3928SL — ujawnienie danych Wi-Fi przez SNMP