Actiontec WCB6200Q Firmware 1.2L.03.5
Approved changes feed: RSS · Atom
cpe:2.3:o:actiontec:wcb6200q_firmware:1.2l.03.5:*:*:*:*:*:*:*
part: o version: 1.2l.03.5 update: *
| Vendor | Actiontec (02563978-d526-5d27-b953-be595024c1b3) |
|---|---|
| Product | Wcb6200Q Firmware (f068cb05-5d93-5076-be42-5a4f6a58ffb2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6146 |
vulnerable | 2026-06-03 14:58:01.986582 |
Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21418.
Published: 2024-06-18T23:39:06.916Z
Updated: 2024-08-01T21:33:04.532Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6145 |
vulnerable | 2026-06-03 14:58:01.986174 |
Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability
HIGH (8.8)
Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the HTTP server. A crafted Cookie header in an HTTP request can trigger the use of a format specifier from a user-supplied string. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21417.
Published: 2024-06-18T23:39:02.468Z
Updated: 2024-08-01T21:33:04.866Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6144 |
vulnerable | 2026-06-03 14:58:01.985758 |
Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21416.
Published: 2024-06-18T23:38:58.518Z
Updated: 2024-08-01T21:33:05.371Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6143 |
vulnerable | 2026-06-03 14:58:01.985225 |
Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21414.
Published: 2024-06-18T23:38:54.394Z
Updated: 2024-08-01T21:33:05.138Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-6142 |
vulnerable | 2026-06-03 14:58:01.981544 |
Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability
HIGH (8.8)
Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the HTTP server. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length buffer. An attacker can leverage this vulnerability to execute code in the context of the HTTP server. Was ZDI-CAN-21410.
Published: 2024-06-18T23:38:49.848Z
Updated: 2024-08-01T21:33:04.598Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.