t-mobile records
14 published records for vendor t-mobile.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 7.1%
- Pre-auth RCE
- 2
- With a fix record
- 14.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation4
- CWE-264 Permissions, Privileges, and Access Controls2
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor2
- CWE-345 Insufficient Verification of Data Authenticity1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1
The weakness classes this vendor ships most often: where to look.
CWEAll records
14 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
64This week | CVE-2014-9583Weaponized | common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and otasus · wrt firmware · CWE-264 | Critical10.0 | — | 80.2% | Jan 8, 2015 |
41Plan | CVE-2007-1823No exploit | T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Ident-mobile · voice mail systems | Critical10.0 | — | 2.0% | Apr 2, 2007 |
40Plan | CVE-2018-14991No exploit | The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro wicoolpad · defiant firmware · CWE-20 | Critical9.8 | — | 1.9% | Apr 25, 2019 |
37Monitor | CVE-2013-5948Proof of concept | The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 asus · rt-ac68u firmware · CWE-78 | High8.5 | — | 9.4% | Apr 22, 2014 |
31Monitor | CVE-2018-15003No exploit | The Coolpad Defiant (Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys) and the T-Mobile Revvl Plus (Coolpad/alchemy/alchemy:coolpad · defiant firmware · CWE-20 | High7.5 | — | 1.8% | Apr 25, 2019 |
31Monitor | CVE-2018-14990No exploit | The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro wicoolpad · defiant firmware · CWE-20 | High7.5 | — | 1.8% | Apr 25, 2019 |
29Monitor | CVE-2012-2980No exploit | The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC Chahtc · chacha · CWE-255 | High7.1 | — | 1.7% | Aug 21, 2012 |
28Monitor | CVE-2011-2716No exploit | The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (busybox · busybox · CWE-20 | Medium6.8 | — | 1.8% | Jul 3, 2012 |
28Monitor | CVE-2014-2718No exploit | ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmwasus · rt series firmware · CWE-345 | High7.1 | — | 1.1% | Nov 4, 2014 |
28Monitor | CVE-2013-1813No exploit | util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which busybox · busybox · CWE-264 | High7.2 | — | 0.6% | Nov 23, 2013 |
25Monitor | CVE-2014-2719No exploit | Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, alasus · rt-ac66u firmware · CWE-200 | Medium6.3 | — | 1.1% | Apr 22, 2014 |
21Monitor | CVE-2014-6733No exploit | The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which alt-mobile · my t-mobile · CWE-310 | Medium5.4 | — | 0.2% | Sep 26, 2014 |
17Monitor | CVE-2014-2925No exploit | Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before asus · rt-ac68u firmware · CWE-79 | Medium4.3 | — | 1.2% | Apr 22, 2014 |
13Monitor | CVE-2023-38301No exploit | An issue was discovered in a third-party component related to vendor.gsm.serial, shipped on devices from multiple device manufacturers.CWE-200 | Low3.4 | — | 0.1% | Apr 22, 2024 |
- CVE-2014-958364This week
common.c in infosvr in ASUS WRT firmware 3.0.0.4.376_1071, 3.0.0.376.2524-g0013f52, and other versions, as used in RT-AC66U, RT-N66U, and ot
CriticalCVSS 10.0WeaponizedEPSS 80%asus · wrt firmwareJan 8, 2015
- CVE-2007-182341Plan
T-Mobile voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailboxes, by spoofing Calling Number Iden
CriticalCVSS 10.0No exploitEPSS 2%t-mobile · voice mail systemsApr 2, 2007
- CVE-2018-1499140Plan
The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro wi
CriticalCVSS 9.8No exploitEPSS 1%coolpad · defiant firmwareApr 25, 2019
- CVE-2013-594837Monitor
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047
HighCVSS 8.5Proof of conceptEPSS 9%asus · rt-ac68u firmwareApr 22, 2014
- CVE-2018-1500331Monitor
The Coolpad Defiant (Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys) and the T-Mobile Revvl Plus (Coolpad/alchemy/alchemy:
HighCVSS 7.5No exploitEPSS 1%coolpad · defiant firmwareApr 25, 2019
- CVE-2018-1499031Monitor
The Coolpad Defiant device with a build fingerprint of Coolpad/cp3632a/cp3632a:7.1.1/NMF26F/099480857:user/release-keys, the ZTE ZMAX Pro wi
HighCVSS 7.5No exploitEPSS 1%coolpad · defiant firmwareApr 25, 2019
- CVE-2012-298029Monitor
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC Cha
HighCVSS 7.1No exploitEPSS 1%htc · chachaAug 21, 2012
- CVE-2011-271628Monitor
The DHCP client (udhcpc) in BusyBox before 1.20.0 allows remote DHCP servers to execute arbitrary commands via shell metacharacters in the (
MediumCVSS 6.8No exploitEPSS 1%busybox · busyboxJul 3, 2012
- CVE-2014-271828Monitor
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmw
HighCVSS 7.1No exploitEPSS 1%asus · rt series firmwareNov 4, 2014
- CVE-2013-181328Monitor
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which
HighCVSS 7.2No exploitEPSS 0%busybox · busyboxNov 23, 2013
- CVE-2014-271925Monitor
Advanced_System_Content.asp in the ASUS RT series routers with firmware before 3.0.0.4.374.5517, when an administrator session is active, al
MediumCVSS 6.3No exploitEPSS 1%asus · rt-ac66u firmwareApr 22, 2014
- CVE-2014-673321Monitor
The My T-Mobile (aka at.tmobile.android.myt) application @7F0C0030 for Android does not verify X.509 certificates from SSL servers, which al
MediumCVSS 5.4No exploitEPSS 0%t-mobile · my t-mobileSep 26, 2014
- CVE-2014-292517Monitor
Cross-site scripting (XSS) vulnerability in Advanced_Wireless_Content.asp in ASUS RT-AC68U and other RT series routers with firmware before
MediumCVSS 4.3No exploitEPSS 1%asus · rt-ac68u firmwareApr 22, 2014
- CVE-2023-3830113Monitor
An issue was discovered in a third-party component related to vendor.gsm.serial, shipped on devices from multiple device manufacturers.
LowCVSS 3.4No exploitEPSS 0%Apr 22, 2024