Actiontec

Records14All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical2CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Actiontec records in CISA KEV

No Actiontec vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Wcb6200q Firmware 6 records MEDIUM Web6000q Firmware 3 records MEDIUM Ncs01 Firmware 2 records LOW C1000a Firmware 1 record LOW Mi424wr-gen3i Firmware 1 record LOW T2200h Firmware 1 record LOW

Records

14 records

TI-2018-11093 CVE-2018-15556 · GHSA-v283-23g5-fgc8

The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with…

MEDIUM 48

The Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 allows login with root level access with the user "root" and an empty password by using the enabled onboard UART headers.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.03258 Published 2019-06-27 No fix listed CWE-287

TI-2018-11092 CVE-2018-15555 · GHSA-234w-xgj2-p772

On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level…

MEDIUM 47

On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02974 Published 2019-06-28 No fix listed CWE-662

TI-2018-11094 CVE-2018-15557 · GHSA-cr8p-pv2x-8ph2

An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q…

MEDIUM 44

An issue was discovered in the Quantenna WiFi Controller on Telus Actiontec WEB6000Q v1.1.02.22 devices.

CVSS 3.0HIGH 8.8 Adjacent network No auth No interaction EPSS 0.03258 Published 2019-06-27 No fix listed CWE-269

TI-2024-05694 CVE-2024-6145 · GHSA-grr9-3239-9wfq

Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability

MEDIUM 42

Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01205 Published 2024-06-18 No fix listed CWE-134

TI-2024-05693 CVE-2024-6144 · GHSA-7r5r-ffqc-9254

Stack-based buffer overflow in Actiontec WCB6200Q

MEDIUM 42

Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01119 Published 2024-06-18 No fix listed CWE-121

TI-2024-05692 CVE-2024-6143 · GHSA-c4w8-gf33-r5f3

Buffer overflow in Actiontec WCB6200Q

MEDIUM 42

Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01119 Published 2024-06-18 No fix listed CWE-120

TI-2024-05691 CVE-2024-6142 · GHSA-4g3q-363c-9m45

Buffer overflow in Actiontec WCB6200Q

MEDIUM 42

Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01119 Published 2024-06-18 No fix listed CWE-120

TI-2024-05695 CVE-2024-6146 · GHSA-vfp8-2c95-8f3h

Stack-based buffer overflow in Actiontec WCB6200Q

MEDIUM 40

Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability.

CVSS 3.1HIGH 8.8 Adjacent network No auth No interaction EPSS 0.01119 Published 2024-06-18 No fix listed CWE-121

TI-2015-02564 CVE-2015-2904 · GHSA-mmcm-ffvh-6vpq

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials…

LOW 38

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface.

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.00892 Published 2015-08-23 No fix listed

TI-2018-07274 CVE-2018-10252 · GHSA-3fww-pf4h-wv5m

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices.

LOW 37

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices.

CVSS 3.0HIGH 8.1 Network No auth No interaction EPSS 0.009 Published 2018-05-14 No fix listed CWE-384

TI-2019-09574 CVE-2019-12789 · GHSA-c7v4-8hc9-h72r

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by…

LOW 31

An issue was discovered on Actiontec T2200H T2200H-31.128L.08 devices, as distributed by Telus.

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00574 Published 2019-06-17 No fix listed

TI-2015-02565 CVE-2015-2905 · GHSA-hr68-cgxf-wrr4

Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware…

LOW 31

Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0066 Published 2015-08-23 No fix listed CWE-352

TI-2013-02706 CVE-2013-3097 · GHSA-5vpg-crm2-p4rv

Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.

LOW 30

Unspecified Cross-site scripting (XSS) vulnerability in the Verizon FIOS Actiontec MI424WR-GEN3I router.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0146 Published 2019-11-13 No fix listed CWE-79

TI-2018-14115 CVE-2018-19922 · GHSA-cfhw-hg24-gjxm

Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website…

LOW 29

Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTM…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.0083 Published 2018-12-06 No fix listed CWE-79

Open these records in search →

Critical	2
High	8
Medium	4
Low	0
No CVSS	0