Technicolor

16 CVEs across 68 Technicolor products. Browse Technicolor vulnerabilities, severities, and proof-of-concept exploits.

Technicolor products with known CVEs

ProductCVEs
Thomson Tcw7106
Thomson Tcw710 Firmware6
Dpc3928sl4
Dpc3928sl Firmware4
Tc72003
Tc7200 Firmware3
Td5130 Router Firmware3
Cga01112
Cga0111 Firmware2
Tc7110.ar2
Tc7110.ar Firmware2
Tc7110.b2
Tc7110.b Firmware2
Tc7200.d1i2
Tc7200.d1i Firmware2
Tc7230 Steb2
Tc7230 Steb Firmware2
Tc7300.b02
Tc7300.b0 Firmware2
Tc73372
Tc7337 Firmware2
C2000t1
C2000t Firmware1
C2100t1
C2100t Firmware1
Cga01011
Cga0101 Firmware1
Cga21211
Cwa01011
Cwa0101 Firmware1
Dpc23201
Dpc2320 Firmware1
Dwg8491
Dwg849 Firmware1
Dwg850-41
Dwg850-4 Firmware1
Dwg8551
Dwg855 Firmware1
Tc7110.d1
Tc7110.d Firmware1
Tc7200.201
Tc7200.20 Firmware1
Tc7200.th2v21
Tc7200.th2v2.d1i1
Tc7200.th2v2.d1i Firmware1
Tc7200.th2v2 Firmware1
Tc7337net1
Tc7337net Firmware1
Tc8305c1
Tc8305c Firmware1
Technicolor CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-3780High7.82024-04-15A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerability allows a local attacker to obtain…
CVE-2023-47352High8.82024-01-22Technicolor TC8715D devices have predictable default WPA2 security passwords. An attacker who scans for SSID and BSSID values may be able to predict these pass…
CVE-2023-31808High7.22023-09-19Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords. One account has administrative privileges, allowing for unrestricted ac…
CVE-2018-25039Low3.52022-06-12A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlB…
CVE-2018-25038Low3.52022-06-12A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The man…
CVE-2018-25037Low3.52022-06-12A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/…
CVE-2018-25036Low3.52022-06-12A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the fi…
CVE-2018-25035Low3.52022-06-12A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL…
CVE-2018-25034Low3.52022-06-12A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /gofo…
CVE-2020-11449High7.52020-04-01An issue was discovered on Technicolor TC7337 8.89.17 devices. An attacker can discover admin credentials in the backup file, aka backupsettings.conf.
CVE-2020-10376Critical9.82020-03-11Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.
CVE-2019-19494High8.82020-01-09Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary code at the kernel…
CVE-2019-19495Critical9.82020-01-08The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScri…
CVE-2019-17524Medium5.42019-11-13An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlan…
CVE-2019-17523Medium5.42019-11-13An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp.
CVE-2015-7276Medium5.92019-11-06Technicolor C2000T and C2100T uses hard-coded cryptographic keys.
CVE-2019-18396High7.22019-10-31An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the…
CVE-2018-8827Medium6.12019-01-03The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, whic…
CVE-2018-20444Critical9.82018-12-25Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1…
CVE-2018-20443Critical9.82018-12-25Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1…
CVE-2018-20442Critical9.82018-12-25Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1…
CVE-2018-20441Critical9.82018-12-25Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1…
CVE-2018-20440Critical9.82018-12-25Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1…
CVE-2018-20439Critical9.82018-12-25Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4…
CVE-2018-20438Critical9.82018-12-25Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4…
CVE-2018-20394Critical9.82018-12-23Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4…
CVE-2018-20393Critical9.82018-12-23Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170…
CVE-2018-20381Critical9.82018-12-23Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6…
CVE-2018-20379Medium4.72018-12-23Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1…
CVE-2018-16310Medium6.52018-09-06Technicolor TG588V V2 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by m…
CVE-2018-15907Medium6.52018-08-29Technicolor (formerly RCA) TC8305C devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demo…
CVE-2018-15852Medium6.52018-08-25Technicolor TC7200.20 devices allow remote attackers to cause a denial of service (networking outage) via a flood of random MAC addresses, as demonstrated by m…
CVE-2017-14127Critical9.82017-09-04Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as ro…
CVE-2017-11320Medium6.12017-08-03Persistent XSS through the SSID of nearby Wi-Fi devices on Technicolor TC7337 routers 08.89.17.20.00 allows an attacker to cause DNS Poisoning and steal creden…
CVE-2017-5135Critical9.12017-04-27Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases. The Technicolor (formerly Cisco) DPC3928…
CVE-2014-1677High7.52017-04-03Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
CVE-2016-7454High8.02016-12-17CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to…
CVE-2014-91442014-12-05Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_…
CVE-2014-91432014-12-05Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to redirect users to arbitrary web sites and conduct…
CVE-2014-91422014-12-05Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to inject arbitrary web script or HTML v…
CVE-2014-06212014-01-08Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the authenticat…
CVE-2014-06202014-01-08Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to inject arbitrary web script o…
CVE-2011-45062011-11-22The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mapping…