CVE-2019-19495

moderate-risk
Published 2020-01-08

The web interface on the Technicolor TC7230 STEB 01.25 is vulnerable to DNS rebinding, which allows a remote attacker to configure the cable modem via JavaScript in a victim's browser. The attacker can then configure the cable modem to port forward the modem's internal TELNET server, allowing external access to a root shell.

Do I need to act?

~
4.5% chance of exploitation in next 30 days
EPSS score — moderate exploit probability
-
Not on CISA KEV list
No confirmed active exploitation reported to CISA
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (1)

Affected Vendors

Technicolor

References (6)

Third Party Advisory https://cablehaunt.com
Exploit https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf
Third Party Advisory https://github.com/Lyrebirds/Fast8690-exploit
Third Party Advisory https://cablehaunt.com
Exploit https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf
Third Party Advisory https://github.com/Lyrebirds/Fast8690-exploit
45
/ 100
moderate-risk
Severity 32/34 · Critical
Exploitability 8/34 · Low
Exposure 5/34 · Minimal