Note:
This project will be discontinued after December 13, 2021. [more]
Product:
Tc7300\.b0_firmware
(Technicolor)| Repositories |
Unknown: This might be proprietary software. |
| #Vulnerabilities | 2 |
| Date | Id | Summary | Products | Score | Patch | Annotated |
|---|---|---|---|---|---|---|
| 2019-11-13 | CVE-2019-17524 | An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the "Connected Clients" field to /wlanAccess.asp. An intranet host can use a crafted hostname to exploit this. | Tc7300\.b0_firmware | N/A | ||
| 2019-11-13 | CVE-2019-17523 | An XSS vulnerability on Technicolor TC7300 STFA.51.20 devices allows remote attackers to inject arbitrary web script via the FileName parameter to /FTPDiag.asp. | Tc7300\.b0_firmware | N/A |