Approved changes feed: RSS · Atom

cpe:2.3:o:actiontec:c1000a_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

VendorActiontec (02563978-d526-5d27-b953-be595024c1b3)
ProductC1000A Firmware (400a132c-a447-528e-8ba1-d429f28f0b0a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19922 vulnerable 2026-06-03 14:38:29.814128 Details available
Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd' URL parameter in a /urlfilter.cmd POST request.
Published: 2018-12-06T22:00:00.000Z
Updated: 2024-09-16T17:14:57.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.