Approved changes feed: RSS · Atom

cpe:2.3:o:technicolor:tc7230_steb_firmware:0.1.25:*:*:*:*:*:*:*

part: o version: 0.1.25 update: *

VendorTechnicolor (007c97e8-b0d3-5a8e-a93d-5ed8b854e1a5)
ProductTc7230 Steb Firmware (4168aa3f-e3a2-5c81-bae6-dfe71e820d6d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-19495 vulnerable 2026-06-08 05:13:23.007501 Details available
The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing external access to a root shell.
Published: 2020-01-08T17:05:54.000Z
Updated: 2024-08-05T02:16:47.424Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.