Technicolor vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-3780 A vulnerability of Information Exposure has been found on Technicolor CGA2121 affecting the version 1.01, this vulnerability allows a local attacker to obtain sHigh 7.8 · Apr 15, 2024
• CVE-2023-47352 Technicolor TC8715D devices have predictable default WPA2 security passwords.High 8.8 · Jan 22, 2024
• CVE-2023-31808 Technicolor TG670 10.5.N.9 devices contain multiple accounts with hard-coded passwords.High 7.2 · Sep 19, 2023
• CVE-2020-11449 An issue was discovered on Technicolor TC7337 8.89.17 devices.High 7.5 · Apr 1, 2020
• CVE-2020-10376 Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.Critical 9.8 · Mar 11, 2020
• CVE-2019-19495 The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScripCritical 9.8 · Jan 8, 2020
• CVE-2019-18396 An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices.High 7.2 · Oct 31, 2019
• CVE-2018-20444 Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5Critical 9.8 · Dec 25, 2018
• CVE-2018-20443 Technicolor TC7200.d1I TC7200.d1IE-N23E-c7000r5712-170406-HAT devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.Critical 9.8 · Dec 25, 2018
• CVE-2018-20442 Technicolor TC7110.B STC8.62.02 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1.Critical 9.8 · Dec 25, 2018
• CVE-2018-20441 Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.Critical 9.8 · Dec 25, 2018
• CVE-2018-20440 Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1.14.1.3Critical 9.8 · Dec 25, 2018
• CVE-2018-20439 Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.4413.2.2.2.1.5.4.1Critical 9.8 · Dec 25, 2018
• CVE-2018-20438 Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4.1.2863.205.10.1.30.4.1.14.1.3.32 and iso.3.6.1.4.1Critical 9.8 · Dec 25, 2018
• CVE-2018-20394 Thomson DWG849 STC0.01.16, DWG850-4 ST9C.05.25, DWG855 ST80.20.26, and TWG870 STB2.01.36 devices allow remote attackers to discover credentials via iso.3.6.1.4.Critical 9.8 · Dec 23, 2018
• CVE-2018-20393 Technicolor CGA0111 CGA0111E-ES-13-E23E-c8000r5712-170217-0829-TRU, CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC, DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-1702Critical 9.8 · Dec 23, 2018
• CVE-2018-20381 Technicolor DPC2320 dpc2300r2-v202r1244101-150420a-v6 devices allow remote attackers to discover credentials via iso.3.6.1.4.1.4491.2.4.1.1.6.1.1.0 and iso.3.6.Critical 9.8 · Dec 23, 2018
• CVE-2017-14127 Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows remote attackers to execute arbitrary OS commands as rooCritical 9.8 · Sep 4, 2017
• CVE-2017-5135 Certain Technicolor devices have an SNMP access-control bypass, possibly involving an ISP customization in some cases.Critical 9.1 · Apr 27, 2017
• CVE-2014-1677 Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.High 7.5 · Apr 3, 2017
• CVE-2016-7454 CSRF vulnerability on Technicolor TC dpc3941T (formerly Cisco dpc3941T) devices with firmware dpc3941-P20-18-v303r20421733-160413a-CMCST allows an attacker to cHigh 8 · Dec 16, 2016
• CVE-2014-9144 Technicolor Router TD5130 with firmware 2.05.C29GV allows remote attackers to execute arbitrary commands via shell metacharacters in the ping field (setobject_iHigh 7.5 · Dec 5, 2014
• CVE-2011-4506 The UPnP IGD implementation on the Thomson (aka Technicolor) TG585 with firmware 7.x before 7.4.3.2 allows remote attackers to establish arbitrary port mappingsHigh 7.5 · Nov 22, 2011