Vulnerabilities

TI-2021-03422 CVE-2021-20122 · GHSA-28rc-568h-qq5j

OS command injection in Telus Wi-Fi Hub

MEDIUM 41

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is affected by an authenticated command injection vulnerability in multiple parameters passed to tr69_cmd.cgi.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.06529 Published 2021-10-11 No fix listed CWE-78

TI-2021-03421 CVE-2021-20121 · GHSA-3xvx-2gw5-hgv2

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an…

LOW 19

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an authenticated arbitrary file read.

CVSS 3.1MEDIUM 4.0 Physical Low privileges No interaction EPSS 0.00498 Published 2021-10-11 No fix listed

TI-2018-11091 CVE-2018-15553 · GHSA-qxq5-575v-fj9w

fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command…

MEDIUM 42

fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field.

CVSS 3.0HIGH 8.8 Network Low privileges No interaction EPSS 0.02244 Published 2018-08-20 No fix listed CWE-78

Vulnerabilities

Filters

OS command injection in Telus Wi-Fi Hub

The Telus Wi-Fi Hub (PRV65B444A-S-TS) with firmware version 3.00.20 is vulnerable to an…

fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command…