Vulnerabilities

TI-2015-02565 CVE-2015-2905 · GHSA-hr68-cgxf-wrr4

Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware…

LOW 31

Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.0066 Published 2015-08-23 No fix listed CWE-352

TI-2015-02564 CVE-2015-2904 · GHSA-mmcm-ffvh-6vpq

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials…

LOW 38

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface.

CVSS 2.0HIGH 8.3 Adjacent network No auth Interaction — EPSS 0.00892 Published 2015-08-23 No fix listed

Vulnerabilities

Filters

Cross-site request forgery (CSRF) vulnerability on Actiontec GT784WN modems with firmware…

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials…