Actiontec GT784WN Modem Privilege Gain Vulnerability

The Actiontec GT784WN is a DSL Digital Subscriber Line modem router from Actiontec USA. A security vulnerability exists in Actiontec GT784WN modems using firmware versions prior to NCS01-1.0.13, which stems from the program's use of hard-coded certificates. A remote attacker could exploit the...

Actiontec GT784WN Modem Cross-Site Request Forgery Vulnerability

The Actiontec GT784WN is a DSL Digital Subscriber Line modem router from Actiontec USA. A cross-site request forgery vulnerability exists in Actiontec GT784WN modems using firmware versions prior to NCS01-1.0.13. A remote attacker could exploit the vulnerability to hijack authentication or hijack...

CVE-2015-2905

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

Hardcoded credentials

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-2904

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface...

CVE-2015-2904

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface...

CVE-2015-2905

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-2904

CVE-2015-2904 affects Actiontec GT784WN modems with firmware prior to NCS01-1.0.13, where hard-coded credentials allow remote attackers to obtain root access by connecting to the web management interface. Public documents confirm the vulnerability is tied to root-privilege credential exposure and...

CVE-2015-2905

The CVE-2015-2905 entry affects the Actiontec GT784WN Wireless N DSL Modem. The vulnerability is a Cross-Site Request Forgery (CSRF) in firmware versions prior to NCS01-1.0.13, which enables a remote attacker to hijack authentication or an intranet connection for arbitrary users. Affected device:...

PT-2015-5965

Name of the Vulnerable Software and Affected Versions Actiontec GT784WN modems with firmware before NCS01-1.0.13 Description The issue allows remote attackers to obtain root access by connecting to the web administration interface due to hardcoded credentials. Recommendations For Actiontec GT784W...

PT-2015-5966

Name of the Vulnerable Software and Affected Versions Actiontec GT784WN versions prior to NCS01-1.0.13 Description A cross-site request forgery issue allows remote attackers to hijack the authentication or intranet connectivity of users. Recommendations For versions prior to NCS01-1.0.13, update...

CVE-2015-2905: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability on Actiontec GT784WN modems with firmware before NCS01-1.0.13 allows remote attackers to hijack the authentication or intranet connectivity of arbitrary users...

CVE-2015-2904: Undefined Security Weakness

Actiontec GT784WN modems with firmware before NCS01-1.0.13 have hardcoded credentials, which makes it easier for remote attackers to obtain root access by connecting to the web administration interface...

CVE-2013-0126

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

CVE-2013-0126

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

CVE-2013-0126

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...

PT-2013-2113

Name of the Vulnerable Software and Affected Versions Actiontec MI424WR-GEN3I router with firmware 40.19.36 Description The issue concerns multiple cross-site request forgery CSRF vulnerabilities in the index.cgi file of the affected router. These vulnerabilities allow remote attackers to hijack...

CVE-2013-0126: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in index.cgi on the Verizon FIOS Actiontec MI424WR-GEN3I router with firmware 40.19.36 allow remote attackers to hijack the authentication of administrators for requests that 1 add administrative accounts via the username and userlevel...