T-Mobile

10 CVEs across 10 T-Mobile products. Browse T-Mobile vulnerabilities, severities, and proof-of-concept exploits.

T-Mobile products with known CVEs

ProductCVEs
Tm-Ac19007
Revvl Plus3
Revvl Plus Firmware3
Zte Zmax Pro2
Zte Zmax Pro Firmware2
G21
My T-Mobile1
Mytouch 3g Slide1
Mytouch 4g Slide1
Voice Mail Systems1
T-Mobile CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2018-15003High7.52019-04-25The Coolpad Defiant (Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys) and the T-Mobile Revvl Plus (Coolpad/alchemy/alchemy:7.1.1/143.14.171129…
CVE-2018-14991Critical9.82019-04-25The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerpr…
CVE-2018-14990High7.52019-04-25The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro with a build fingerpr…
CVE-2014-95832015-01-08common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and other routers, does n…
CVE-2014-27182014-11-04ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x d…
CVE-2014-67332014-09-26The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-mid…
CVE-2014-29252014-04-22Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 al…
CVE-2014-27192014-04-22Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, allows remote authent…
CVE-2013-59482014-04-22The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authe…
CVE-2013-18132013-11-23util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users…
CVE-2012-29802012-08-21The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, H…
CVE-2011-27162012-07-03The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (1) HOST_NAME, (2) D…
CVE-2007-18232007-04-02T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Identification (CNID, a…