Actiontec
8 CVEs across 12 Actiontec products. Browse Actiontec vulnerabilities, severities, and proof-of-concept exploits.
Actiontec products with known CVEs
Actiontec CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-6146 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attac… |
CVE-2024-6145 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on… |
CVE-2024-6144 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to… |
CVE-2024-6143 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbi… |
CVE-2024-6142 | High | 8.8 | 2024-06-19 | Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arb… |
CVE-2013-3097 | Medium | 6.1 | 2019-11-13 | Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router. |
CVE-2018-15555 | Critical | 9.8 | 2019-06-28 | On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onb… |
CVE-2018-15557 | High | 8.8 | 2019-06-27 | An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/her IP to anything… |
CVE-2018-15556 | Critical | 9.8 | 2019-06-27 | The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using th… |
CVE-2019-12789 | Medium | 6.8 | 2019-06-17 | An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system boar… |
CVE-2018-19922 | Medium | 6.1 | 2018-12-06 | Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC0… |
CVE-2018-10252 | High | 8.1 | 2018-05-14 | An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking… |
CVE-2015-2905 | | | 2015-08-23 | Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authenticat… |
CVE-2015-2904 | | | 2015-08-23 | Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by conn… |