Approved changes feed: RSS · Atom

cpe:2.3:h:actiontec:c1000a:-:*:*:*:*:*:*:*

part: h version: - update: *

VendorActiontec (02563978-d526-5d27-b953-be595024c1b3)
ProductC1000A (acb04cde-5553-5ee2-8813-c854a6d61eff)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-19922 not_vulnerable 2026-06-03 14:38:29.814865 Details available
Persistent Cross-Site Scripting (XSS) in the advancedsetup_websiteblocking.html Website Blocking page of the Actiontec C1000A router with firmware through CAC004-31.30L.95 allows a remote attacker to inject arbitrary HTML into the Website Blocking page by inserting arbitrary HTML into the 'TodUrlAdd' URL parameter in a /urlfilter.cmd POST request.
Published: 2018-12-06T22:00:00.000Z
Updated: 2024-09-16T17:14:57.821Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.