CVE-2018-15553

The CVE-2018-15553 entry concerns Telus Actiontec T2200H/T2200H-31.128L.03 devices where the fileshare.cmd component allows OS command injection via shell metacharacters in the smbdUserid or smbdPasswd fields. Affected product/firmware: Telus Actiontec T2200H with firmware 31.128L.03. Root cause ...

PT-2018-13083

Name of the Vulnerable Software and Affected Versions Actiontec T2200H version T2200H-31.128L.03 Description The issue allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field of the fileshare.cmd on the affected device. Recommendations For version...

CVE-2018-15553: Improper Neutralization of Special Elements used in an OS Command

fileshare.cmd on Telus Actiontec T2200H T2200H-31.128L.03 devices allows OS Command Injection via shell metacharacters in the smbdUserid or smbdPasswd field...

Unspecified Vulnerability in Actiontec WCB6200Q

The Actiontec WCB6200Q is a WiFi network extender from Actiontec USA. A security vulnerability exists in the Actiontec WCB6200Q prior to version 1.1.10.20a, which stems from the program failing to securely create an administrator login session cookie.An attacker could use this vulnerability to...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

Code injection

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

CVE-2018-10252

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

CVE-2018-10252

CVE-2018-10252 affects Actiontec WCB6200Q prior to firmware 1.1.10.20a. The admin login session cookie is generated insecurely (time-of-day rounded to 10 ms), allowing an attacker to step through possible session IDs and hijack admin sessions. Once a valid session is obtained, the attacker can ad...

CVE-2018-10252: Session Fixation

An issue was discovered on Actiontec WCB6200Q before 1.1.10.20a devices. The admin login session cookie is insecurely generated making admin session hijacking possible. When an admin logs in, a session cookie is generated using the time of day rounded to 10ms. Since the web server returns its...

PT-2018-9786

Name of the Vulnerable Software and Affected Versions: Actiontec WCB6200Q versions prior to 1.1.10.20a Description: An issue allows admin session hijacking due to insecurely generated admin login session cookies. When an admin logs in, a session cookie is generated using the time of day rounded t...

Actiontec C1000A Modem Backdoor Account

Exploit Title: Actiontec C1000A backdoor account Google Dork: NA Date: 11/04/2017 Exploit Author: Joseph McDonagh Vendor Homepage: https://actiontecsupport.zendesk.com/hc/en-us Software Link: N/A Hardware Version: Firmware CAC003-31.30L.86 Tested on: Linux CVE : NA The Actiontec C1000A Modem...

Actiontec C1000A Modem - Backdoor Account Vulnerability

Exploit for hardware platform in category remote exploits Exploit Title: Actiontec C1000A backdoor account Google Dork: NA Date: 11/04/2017 Exploit Author: Joseph McDonagh Vendor Homepage: https://actiontecsupport.zendesk.com/hc/en-us Software Link: N/A Hardware Version: Firmware CAC003-31.30L.86...

Actiontec C1000A Modem Backup Account (Telnet)

The Actiontec C1000A modem has a backdoor account with hardcoded credentials. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Actiontec C1000A Modem - Backdoor Account

Actiontec C1000A Modem - Backdoor Account Exploit Title: Actiontec C1000A backdoor account Google Dork: NA Date: 11/04/2017 Exploit Author: Joseph McDonagh Vendor Homepage: https://actiontecsupport.zendesk.com/hc/en-us Software Link: N/A Hardware Version: Firmware CAC003-31.30L.86 Tested on: Linu...

Actiontec C1000A Modem - Backdoor Account

Exploit Title: Actiontec C1000A backdoor account Google Dork: NA Date: 11/04/2017 Exploit Author: Joseph McDonagh Vendor Homepage: https://actiontecsupport.zendesk.com/hc/en-us Software Link: N/A Hardware Version: Firmware CAC003-31.30L.86 Tested on: Linux CVE : NA The Actiontec C1000A Modem...

Actiontec WCB3000N Elevation of Privilege Vulnerability

The Actiontec WCB3000N is a network card product from Actiontec USA that provides related network services. An elevation of privilege vulnerability exists in the Actiontec WCB3000N version 0.16.2.5, which can be exploited by an attacker to gain administrator privileges and execute arbitrary code...

Actiontec WCB3000N 0.16.2.5 Privilege Escalation Vulnerability

Exploit for hardware platform in category remote exploits Device Details Vendor: Actiontec Telus Branded Model: WCB3000N Affected Firmware: v0.16.2.5 Device Manual: http://static.telus.com/common/cms/files/internet/wifiplusextender.pdf Reported: November 2015 Status: Fixed on newest pushed firmwa...

Actiontec WCB3000N 0.16.2.5 Privilege Escalation

Device Details Vendor: Actiontec Telus Branded Model: WCB3000N Affected Firmware: v0.16.2.5 Device Manual: http://static.telus.com/common/cms/files/internet/wifiplusextender.pdf Reported: November 2015 Status: Fixed on newest pushed firmware version CVE: Update is handled by the vendor, therefore...

ActionTec C1000A Modem/Router XSS and arbitrary CSRF Vulnerabilities

This moden and router, like most, is a sea filled with CSRF and XSS exploits. If the user is logged in to the modem say, an administrator, a specific link can be crafted to execute arbitrary web UI commands. The addition of the XSS is really just a bonus allowing for more complex vectors. The...