Vulnerability in Philips Dtr3502bfta Dvb-T2
CVE-2020-11617
The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client.
Vulnerability class: Improper Certificate Validation
Published · last modified .
CVSS v3 metric
CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N.
EPSS exploit prediction
EPSS: 0.004 (33.8th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 34th percentile — 33.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Philips Dtr3502bfta Dvb-T2
- Philips Dtr3502bfta Dvb-T2 Firmware — versions 2.2.1
- Thomsonstb Tht741fta
- Thomsonstb Tht741fta Firmware — versions 2.2.1
Weakness classification (CWE)
References
- decoded.avast.io/vladislaviliushin/flaws-in-dvb-t2-set-top-boxes-exposed/ (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2020-11617?
- CVE-2020-11617 is a medium-severity vulnerability in Philips Dtr3502bfta Dvb-T2, classified under Improper Certificate Validation. CVSS score: 5.9/10. Published 2020-08-31.
- How severe is CVE-2020-11617?
- Medium severity. CVSS v3 base score is 5.9 out of 10.