PT-2018-13242 · Technicolor · Technicolor Tc7200

B4Ckd00₹ + 1 · Published 2018-08-25 · Updated 2024-08-27 · CVE-2018-15852

Positive Technologies (AI Summary)

CVSS v2.0

6.1

Medium

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Technicolor TC7200.20 version 20

Description The issue allows remote attackers to cause a denial of service, resulting in a networking outage, by flooding the device with random MAC addresses, as demonstrated by macof. It is noted that Technicolor denies this behavior is a vulnerability, stating that Wi-Fi traffic is only slowed or stopped while the device is under a MAC flooding attack. This behavior has been confirmed through testing against official up-to-date versions.

Recommendations For Technicolor TC7200.20 version 20, at the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-15852

Affected Products

Technicolor Tc7200

References · 7

• 🔥 https://bkd00r.wordpress.com/2018/08/24/cve-2018-15852-exploit-title-cable-modem-technicolor-tc7200-20-wifi-buffer-overflow · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2018-15852 · Security Note
• https://t.me/cvenotify/89162 · Telegram Post
• https://t.me/cvenotify/89174 · Telegram Post
• https://t.me/cvenotify/82685 · Telegram Post
• https://t.me/cvenotify/89161 · Telegram Post
• https://t.me/cvenotify/92398 · Telegram Post