Vulnerabilities (CVE)

Filtered by vendor Technicolor Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-9142 1 Technicolor 1 Td5130 Router Firmware 2018-10-09 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to inject arbitrary web script or HTML via the failrefer parameter.
CVE-2014-9143 1 Technicolor 1 Td5130 Router Firmware 2018-10-09 4.3 MEDIUM N/A
Open redirect vulnerability in Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the failrefer parameter.
CVE-2014-9144 1 Technicolor 1 Td5130 Router Firmware 2018-10-09 7.5 HIGH N/A
Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_ip parameter).
CVE-2014-0620 1 Technicolor 2 Tc7200, Tc7200 Firmware 2015-07-24 4.3 MEDIUM N/A
Multiple cross-site scripting (XSS) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to inject arbitrary web script or HTML via the (1) ADDNewDomain parameter to parental/website-filters.asp or (2) VmTracerouteHost parameter to goform/status/diagnostics-route.
CVE-2014-0621 1 Technicolor 2 Tc7200, Tc7200 Firmware 2014-05-05 6.8 MEDIUM N/A
Multiple cross-site request forgery (CSRF) vulnerabilities in Technicolor (formerly Thomson) TC7200 STD6.01.12 allow remote attackers to hijack the authentication of administrators for requests that (1) perform a factory reset via a request to goform/system/factory, (2) disable advanced options via a request to goform/advanced/options, (3) remove ip-filters via the IpFilterAddressDelete1 parameter to goform/advanced/ip-filters, or (4) remove firewall settings via the cbFirewall parameter to goform/advanced/firewall.
CVE-2011-4506 1 Technicolor 2 Tg585 Router, Tg585 Router Firmware 2012-03-08 7.5 HIGH N/A
The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.