Vulnerabilities

TI-2018-15266 CVE-2018-25039 · GHSA-8ww3-2vxv-r4rg

Thomson TCW710 RgUrlBlock.asp Persistent cross site scriting

MEDIUM 58

A vulnerability was found in Thomson TCW710 ST5D.10.05.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00544 Published 2022-06-12 No fix listed CWE-80

TI-2018-15265 CVE-2018-25038 · GHSA-2m3p-pgf6-5rx3

Thomson TCW710 RgDhcp Persistent cross site scriting

MEDIUM 58

A vulnerability was found in Thomson TCW710 ST5D.10.05.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00596 Published 2022-06-12 No fix listed CWE-80

TI-2018-15264 CVE-2018-25037 · GHSA-4h2c-cx63-xhxx

Thomson TCW710 RgDdns Persistent cross site scriting

MEDIUM 58

A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00596 Published 2022-06-12 No fix listed CWE-80

TI-2018-15263 CVE-2018-25036 · GHSA-4rc6-v4jg-27v9

Thomson TCW710 RgTime Persistent cross site scriting

MEDIUM 58

A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00596 Published 2022-06-12 No fix listed CWE-80

TI-2018-15262 CVE-2018-25035 · GHSA-v3q8-j7rp-9vgp

Thomson TCW710 RGFirewallEL Persistent cross site scriting

MEDIUM 58

A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00596 Published 2022-06-12 No fix listed CWE-80

TI-2018-15261 CVE-2018-25034 · GHSA-qprw-hc7p-66cj

Thomson TCW710 wlanPrimaryNetwork Persistent cross site scripting

LOW 26

A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00748 Published 2022-06-12 No fix listed CWE-80

TI-2014-03880 CVE-2014-4716 · GHSA-h83v-45rc-pjvv

Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote…

LOW 34

Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote attackers to hijack the authentication of unspecified victims for requests that change passwords via the Password and PasswordReEnter par…

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02278 Published 2014-07-03 No fix listed CWE-352

TI-2007-05741 CVE-2007-6003 · GHSA-q9hw-w9f9-xp3r

Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch…

LOW 22

Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch 716 with firmware 5.4.0.14 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01196 Published 2007-11-15 No fix listed CWE-79

TI-2007-04601 CVE-2007-4753 · GHSA-4937-fcr5-874r

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a…

LOW 26

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via (1) an empty SIP message or (2) a SIP INVITE message with a malformed To header, different vectors…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01707 Published 2007-09-08 No fix listed

TI-2007-04408 CVE-2007-4553 · GHSA-8rpc-f5pg-452p

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a…

LOW 34

The Thomson ST 2030 SIP phone with software 1.52.1 allows remote attackers to cause a denial of service (device hang) via an INVITE message with a Via header that contains a '/' (slash) instead of the required space foll…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.08214 Published 2007-08-28 No fix listed

TI-2006-00922 CVE-2006-0947 · GHSA-qrv9-wv5m-pvjq

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create…

LOW 38

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when c…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02686 Published 2006-03-01 No fix listed

TI-2006-00921 CVE-2006-0946 · GHSA-cj9f-69gv-6vg9

Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware…

LOW 24

Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0 allows remote attackers to inject arbitrary web script or HTML via the name parameter to the LocalNetwork page.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01973 Published 2006-03-01 No fix listed

TI-2004-00582 CVE-2004-0641 · GHSA-c2xh-jwfq-qgr6

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier…

LOW 38

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02611 Published 2005-04-14 No fix listed

TI-2005-00451 CVE-2005-0494 · GHSA-2w9q-2gq5-vqqj

The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running…

LOW 38

The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02583 Published 2005-02-21 No fix listed

Vulnerabilities

Filters