Actiontec

14 CVEs across 12 Actiontec products. Browse Actiontec vulnerabilities, severities, and proof-of-concept exploits.

Actiontec products with known CVEs

ProductCVEs
Wcb6200q6
Wcb6200q Firmware6
Web6000q3
Web6000q Firmware3
Gt784wn Wireless N Dsl Modem2
Ncs01 Firmware2
C1000a1
C1000a Firmware1
Mi424wr-Gen3i1
Mi424wr-Gen3i Firmware1
T2200h1
T2200h Firmware1
Actiontec CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-6146High8.82024-06-19Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attac…
CVE-2024-6145High8.82024-06-19Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on…
CVE-2024-6144High8.82024-06-19Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to…
CVE-2024-6143High8.82024-06-19Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbi…
CVE-2024-6142High8.82024-06-19Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arb…
CVE-2013-3097Medium6.12019-11-13Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.
CVE-2018-15555Critical9.82019-06-28On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onb…
CVE-2018-15557High8.82019-06-27An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices. An attacker can statically set his/her IP to anything…
CVE-2018-15556Critical9.82019-06-27The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using th…
CVE-2019-12789Medium6.82019-06-17An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus. By attaching a UART adapter to the UART pins on the system boar…
CVE-2018-19922Medium6.12018-12-06Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC0…
CVE-2018-10252High8.12018-05-14An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking…
CVE-2015-29052015-08-23Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authenticat…
CVE-2015-29042015-08-23Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by conn…