Technicolor records
43 published records for vendor technicolor.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 1 · 2.3%
- Pre-auth RCE
- 3
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-522 Insufficiently Protected Credentials9
- CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7
- CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)6
- CWE-400 Uncontrolled Resource Consumption3
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')2
- CWE-352 Cross-Site Request Forgery (CSRF)2
The weakness classes this vendor ships most often: where to look.
CWEAll records
43 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
42Plan | CVE-2019-19494Weaponized | Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrarysagemcom · f\@st 3890 firmware · CWE-120 | High8.8 | — | 23.0% | Jan 9, 2020 |
41Plan | CVE-2017-5135Proof of concept | Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases.technicolor · dpc3928sl firmware | Critical9.1 | — | 17.8% | Apr 27, 2017 |
40Plan | CVE-2019-19495No exploit | The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cabletechnicolor · tc7230 steb firmware · CWE-20 | Critical9.8 | — | 4.2% | Jan 8, 2020 |
40Plan | CVE-2017-14127No exploit | Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrartechnicolor · td5336 firmware · CWE-78 | Critical9.8 | — | 2.6% | Sep 4, 2017 |
39Monitor | CVE-2018-20381No exploit | Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.technicolor · dpc2320 firmware | Critical9.8 | — | 1.5% | Dec 23, 2018 |
39Monitor | CVE-2018-20393No exploit | Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-Atechnicolor · cga0111 firmware | Critical9.8 | — | 1.5% | Dec 23, 2018 |
39Monitor | CVE-2018-20394No exploit | Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentitechnicolor · dwg849 firmware · CWE-522 | Critical9.8 | — | 1.5% | Dec 23, 2018 |
39Monitor | CVE-2018-20438No exploit | Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.technicolor · tc7110.ar firmware · CWE-522 | Critical9.8 | — | 1.3% | Dec 25, 2018 |
39Monitor | CVE-2018-20443No exploit | Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1technicolor · tc7200.d1i firmware · CWE-522 | Critical9.8 | — | 1.3% | Dec 25, 2018 |
39Monitor | CVE-2018-20442No exploit | Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.3technicolor · tc7110.b firmware · CWE-522 | Critical9.8 | — | 1.3% | Dec 25, 2018 |
39Monitor | CVE-2018-20441No exploit | Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1technicolor · tc7200.th2v2 firmware · CWE-522 | Critical9.8 | — | 1.3% | Dec 25, 2018 |
39Monitor | CVE-2018-20440No exploit | Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.technicolor · cwa0101 firmware · CWE-522 | Critical9.8 | — | 1.3% | Dec 25, 2018 |
39Monitor | CVE-2018-20439No exploit | Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.technicolor · dpc3928sl firmware · CWE-522 | Critical9.8 | — | 1.2% | Dec 25, 2018 |
39Monitor | CVE-2018-20444No exploit | Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.technicolor · cga0111 firmware · CWE-522 | Critical9.8 | — | 1.2% | Dec 25, 2018 |
39Monitor | CVE-2020-10376No exploit | Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Bastechnicolor · tc7337net firmware · CWE-319 | Critical9.8 | — | 1.0% | Mar 11, 2020 |
35Monitor | CVE-2014-1677Proof of concept | Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.technicolor · tc7200 firmware · CWE-200 | High7.5 | — | 17.7% | Apr 3, 2017 |
35Monitor | CVE-2023-47352No exploit | Technicolor TC8715D devices have predictable default WPA2 security passwords.technicolor · tc8715d firmware | High8.8 | — | 0.3% | Jan 22, 2024 |
33Monitor | CVE-2019-18396Proof of concept | An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices.technicolor · td5130v2 firmware · CWE-78 | High7.2 | — | 16.2% | Oct 31, 2019 |
33Monitor | CVE-2014-9144Proof of concept | Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the pintechnicolor · td5130 router firmware · CWE-77 | High7.5 | — | 8.5% | Dec 5, 2014 |
33Monitor | CVE-2016-7454Proof of concept | CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST alltechnicolor · xfinity gateway router dpc3941t firmware · CWE-352 | High8.0 | — | 3.3% | Dec 16, 2016 |
31Monitor | CVE-2024-3780No exploit | Information exposure vulnerability on Technicolor CGA2121technicolor · cga2121 · CWE-200 | High7.8 | — | 0.1% | Apr 15, 2024 |
30Monitor | CVE-2011-4506No exploit | The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbtechnicolor · tg585 router firmware · CWE-16 | High7.5 | — | 1.3% | Nov 22, 2011 |
30Monitor | CVE-2020-11449No exploit | An issue was discovered on Technicolor TC7337 8.89.17 devices.technicolor · tc7337 firmware · CWE-522 | High7.5 | — | 1.1% | Apr 1, 2020 |
28Monitor | CVE-2023-31808No exploit | Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords.technicolor · tg670 firmware · CWE-798 | High7.2 | — | 0.6% | Sep 19, 2023 |
27Monitor | CVE-2014-0621Proof of concept | Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijtechnicolor · tc7200 firmware · CWE-352 | Medium6.8 | — | 1.0% | Jan 8, 2014 |
- CVE-2019-1949442Plan
Broadcom based cable modems across multiple vendors are vulnerable to a buffer overflow, which allows a remote attacker to execute arbitrary
HighCVSS 8.8WeaponizedEPSS 23%sagemcom · f\@st 3890 firmwareJan 9, 2020
- CVE-2017-513541Plan
Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases.
CriticalCVSS 9.1Proof of conceptEPSS 17%technicolor · dpc3928sl firmwareApr 27, 2017
- CVE-2019-1949540Plan
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable
CriticalCVSS 9.8No exploitEPSS 4%technicolor · tc7230 steb firmwareJan 8, 2020
- CVE-2017-1412740Plan
Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrar
CriticalCVSS 9.8No exploitEPSS 2%technicolor · td5336 firmwareSep 4, 2017
- CVE-2018-2038139Monitor
Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.
CriticalCVSS 9.8No exploitEPSS 1%technicolor · dpc2320 firmwareDec 23, 2018
- CVE-2018-2039339Monitor
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A
CriticalCVSS 9.8No exploitEPSS 1%technicolor · cga0111 firmwareDec 23, 2018
- CVE-2018-2039439Monitor
Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credenti
CriticalCVSS 9.8No exploitEPSS 1%technicolor · dwg849 firmwareDec 23, 2018
- CVE-2018-2043839Monitor
Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.
CriticalCVSS 9.8No exploitEPSS 1%technicolor · tc7110.ar firmwareDec 25, 2018
- CVE-2018-2044339Monitor
Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1
CriticalCVSS 9.8No exploitEPSS 1%technicolor · tc7200.d1i firmwareDec 25, 2018
- CVE-2018-2044239Monitor
Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.3
CriticalCVSS 9.8No exploitEPSS 1%technicolor · tc7110.b firmwareDec 25, 2018
- CVE-2018-2044139Monitor
Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1
CriticalCVSS 9.8No exploitEPSS 1%technicolor · tc7200.th2v2 firmwareDec 25, 2018
- CVE-2018-2044039Monitor
Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.
CriticalCVSS 9.8No exploitEPSS 1%technicolor · cwa0101 firmwareDec 25, 2018
- CVE-2018-2043939Monitor
Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.
CriticalCVSS 9.8No exploitEPSS 1%technicolor · dpc3928sl firmwareDec 25, 2018
- CVE-2018-2044439Monitor
Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.
CriticalCVSS 9.8No exploitEPSS 1%technicolor · cga0111 firmwareDec 25, 2018
- CVE-2020-1037639Monitor
Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Bas
CriticalCVSS 9.8No exploitEPSS 1%technicolor · tc7337net firmwareMar 11, 2020
- CVE-2014-167735Monitor
Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.
HighCVSS 7.5Proof of conceptEPSS 17%technicolor · tc7200 firmwareApr 3, 2017
- CVE-2023-4735235Monitor
Technicolor TC8715D devices have predictable default WPA2 security passwords.
HighCVSS 8.8No exploitEPSS 0%technicolor · tc8715d firmwareJan 22, 2024
- CVE-2019-1839633Monitor
An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices.
HighCVSS 7.2Proof of conceptEPSS 16%technicolor · td5130v2 firmwareOct 31, 2019
- CVE-2014-914433Monitor
Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the pin
HighCVSS 7.5Proof of conceptEPSS 8%technicolor · td5130 router firmwareDec 5, 2014
- CVE-2016-745433Monitor
CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST all
HighCVSS 8.0Proof of conceptEPSS 3%technicolor · xfinity gateway router dpc3941t firmwareDec 16, 2016
- CVE-2024-378031Monitor
Information exposure vulnerability on Technicolor CGA2121
HighCVSS 7.8No exploitEPSS 0%technicolor · cga2121Apr 15, 2024
- CVE-2011-450630Monitor
The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arb
HighCVSS 7.5No exploitEPSS 1%technicolor · tg585 router firmwareNov 22, 2011
- CVE-2020-1144930Monitor
An issue was discovered on Technicolor TC7337 8.89.17 devices.
HighCVSS 7.5No exploitEPSS 1%technicolor · tc7337 firmwareApr 1, 2020
- CVE-2023-3180828Monitor
Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords.
HighCVSS 7.2No exploitEPSS 0%technicolor · tg670 firmwareSep 19, 2023
- CVE-2014-062127Monitor
Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hij
MediumCVSS 6.8Proof of conceptEPSS 1%technicolor · tc7200 firmwareJan 8, 2014