GCVE - cpe:2.3:h:technicolor:thomson_tcw710:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:technicolor:thomson_tcw710:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Technicolor (`007c97e8-b0d3-5a8e-a93d-5ed8b854e1a5`)
Product	Thomson Tcw710 (`43a6ca15-5d62-56cb-b1d3-72f4e3a117fb`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-25039`	not_vulnerable	2026-06-03 14:38:40.717239	Thomson TCW710 RgUrlBlock.asp Persistent cross site scriting LOW (3.5) A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been declared as problematic. This vulnerability affects unknown code of the file /goform/RgUrlBlock.asp. The manipulation of the argument BasicParentalNewKeyword with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-12T07:40:27.000Z Updated: 2025-04-15T14:26:06.236Z Open on db.gcve.eu Reference links https://alquimistadesistemas.com/auditando-router-thomson-tcw710 https://vuldb.com/?id.126700	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25038`	not_vulnerable	2026-06-03 14:38:40.716773	Thomson TCW710 RgDhcp Persistent cross site scriting LOW (3.5) A vulnerability was found in Thomson TCW710 ST5D.10.05. It has been classified as problematic. This affects an unknown part of the file /goform/RgDhcp. The manipulation of the argument PppUserName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-12T07:40:25.000Z Updated: 2025-04-15T14:26:13.292Z Open on db.gcve.eu Reference links https://alquimistadesistemas.com/auditando-router-thomson-tcw710 https://vuldb.com/?id.126699	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25037`	not_vulnerable	2026-06-03 14:38:40.716309	Thomson TCW710 RgDdns Persistent cross site scriting LOW (3.5) A vulnerability was found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this issue is some unknown functionality of the file /goform/RgDdns. The manipulation of the argument DdnsHostName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-12T07:40:24.000Z Updated: 2025-04-15T14:26:19.959Z Open on db.gcve.eu Reference links https://alquimistadesistemas.com/auditando-router-thomson-tcw710 https://vuldb.com/?id.126698	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25036`	not_vulnerable	2026-06-03 14:38:40.715841	Thomson TCW710 RgTime Persistent cross site scriting LOW (3.5) A vulnerability has been found in Thomson TCW710 ST5D.10.05 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /goform/RgTime. The manipulation of the argument TimeServer1/TimeServer2/TimeServer3 with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-12T07:40:22.000Z Updated: 2025-04-15T14:26:29.134Z Open on db.gcve.eu Reference links https://alquimistadesistemas.com/auditando-router-thomson-tcw710 https://vuldb.com/?id.126697	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25035`	not_vulnerable	2026-06-03 14:38:40.715350	Thomson TCW710 RGFirewallEL Persistent cross site scriting LOW (3.5) A vulnerability, which was classified as problematic, was found in Thomson TCW710 ST5D.10.05. Affected is an unknown function of the file /goform/RGFirewallEL. The manipulation of the argument EmailAddress/SmtpServerName with the input ><script>alert(1)</script> as part of POST Request leads to cross site scripting (Persistent). It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. Published: 2022-06-12T07:40:21.000Z Updated: 2025-04-15T14:26:36.643Z Open on db.gcve.eu Reference links https://alquimistadesistemas.com/auditando-router-thomson-tcw710 https://vuldb.com/?id.126696	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-25034`	not_vulnerable	2026-06-03 14:38:40.714756	Thomson TCW710 wlanPrimaryNetwork Persistent cross site scripting LOW (3.5) A vulnerability, which was classified as problematic, has been found in Thomson TCW710 ST5D.10.05. This issue affects some unknown processing of the file /goform/wlanPrimaryNetwork. The manipulation of the argument ServiceSetIdentifier with the input ><script>alert(1)</script> as part of POST Request leads to basic cross site scripting (Persistent). The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-126695. Published: 2022-06-12T07:40:19.000Z Updated: 2024-08-05T12:26:39.613Z Open on db.gcve.eu Reference links https://vuldb.com/?id.126695 https://vuldb.com/?ctiid.126695 https://alquimistadesistemas.com/auditando-router-thomson-tcw710	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.