Skip to content
Noroxi

Actiontec records

14 published records for vendor actiontec.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
5
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 19
  3. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

14 records
  • CVE-2018-15556
    40Plan

    The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty p

    CriticalCVSS 9.8No exploitEPSS 3%

    actiontec · web6000q firmwareJun 27, 2019

  • CVE-2018-15555
    40Plan

    On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by us

    CriticalCVSS 9.8No exploitEPSS 3%

    actiontec · web6000q firmwareJun 28, 2019

  • CVE-2018-15557
    36Monitor

    An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices.

    HighCVSS 8.8No exploitEPSS 3%

    actiontec · web6000q firmwareJun 27, 2019

  • CVE-2024-6145
    35Monitor

    Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    actiontec · wcb6200q firmwareJun 18, 2024

  • CVE-2024-6142
    35Monitor

    Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    actiontec · wcb6200q firmwareJun 18, 2024

  • CVE-2024-6144
    35Monitor

    Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    actiontec · wcb6200q firmwareJun 18, 2024

  • CVE-2024-6146
    35Monitor

    Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    actiontec · wcb6200q firmwareJun 18, 2024

  • CVE-2024-6143
    35Monitor

    Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability

    HighCVSS 8.8No exploitEPSS 1%

    actiontec · wcb6200q firmwareJun 18, 2024

  • CVE-2015-2904
    33Monitor

    Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain

    HighCVSS 8.3No exploitEPSS 1%

    actiontec · ncs01 firmwareAug 23, 2015

  • CVE-2018-10252
    32Monitor

    An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices.

    HighCVSS 8.1No exploitEPSS 1%

    actiontec · wcb6200q firmwareMay 14, 2018

  • CVE-2015-2905
    27Monitor

    Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hij

    MediumCVSS 6.8No exploitEPSS 1%

    actiontec · ncs01 firmwareAug 23, 2015

  • CVE-2019-12789
    27Monitor

    An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus.

    MediumCVSS 6.8No exploitEPSS 1%

    actiontec · t2200h firmwareJun 17, 2019

  • CVE-2013-3097
    24Monitor

    Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.

    MediumCVSS 6.1No exploitEPSS 1%

    actiontec · mi424wr-gen3i firmwareNov 13, 2019

  • CVE-2018-19922
    24Monitor

    Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with fi

    MediumCVSS 6.1No exploitEPSS 1%

    actiontec · c1000a firmwareDec 6, 2018