CRITICAL🇬🇧 English

CVE-2020-10376

CVSS 9.8v3.1pub. 2020-03-11upd. 2024-11-21

Technicolor TC7337NET 08.89.17.23.03 devices allow remote attackers to discover passwords by sniffing the network for an "Authorization: Basic" HTTP header.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Technicolor Tc7337net

    HW
    Technicolor
    wszystkie wersje

  • Technicolor Tc7337net Firmware

    OS
    Technicolor
    08.89.17.23.03
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
CWE
Referencje

Powiązane podatności

CVE-2019-19495CRITICAL9.8ten sam vendor

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote a...

CVE-2018-20441CRITICAL9.8ten sam vendor

Technicolor TC7200.TH2v2 SC05.00.22 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1...

CVE-2018-20438CRITICAL9.8ten sam vendor

Technicolor TC7110.AR STD3.38.03 devices allow remote attackers to discover Wi-Fi credentials via iso.3.6.1.4....

CVE-2018-20439CRITICAL9.8ten sam vendor

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-170214a devices allow remote attackers to discover Wi-F...

CVE-2018-20440CRITICAL9.8ten sam vendor

Technicolor CWA0101 CWA0101E-A23E-c7000r5712-170315-SKC devices allow remote attackers to discover Wi-Fi crede...