PT-2019-4314 · Technicolor · Technicolor Tc7230

Simon Vandel Sillesen · Published 2019-08-26 · Updated 2020-01-22 · CVE-2019-19495

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Technicolor TC7230 STEB version 01.25

Description The web interface of the Technicolor TC7230 is susceptible to DNS rebinding attacks. This allows a remote attacker to configure the cable modem by executing JavaScript in a victim's browser. The attacker can then set up the cable modem to port forward its internal TELNET server, enabling external access to a root shell. The issue is related to security configuration errors in the router's firmware.

Recommendations For Technicolor TC7230 STEB version 01.25, consider disabling the web interface until a patch is available to prevent DNS rebinding attacks. Restrict access to the TELNET server to minimize the risk of exploitation. Avoid using the web interface from untrusted networks or devices to reduce the likelihood of a successful attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Improper Privilege Management

Weakness Enumeration

CWE-20

CWE-269

Related Identifiers

BDU:2020-00029

CVE-2019-19495

Affected Products

Technicolor Tc7230

References · 8

• 🔥 https://github.com/Lyrebirds/Fast8690-exploit · Exploit
• 🔥 https://github.com/Lyrebirds/sagemcom-fast-3890-exploit · Exploit
• 🔥 https://github.com/Lyrebirds/Cable-Haunt-Report/releases/download/2.4/report.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2019-19495 · Vendor Advisory
• https://bdu.fstec.ru/vul/2020-00029 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2019-19495 · Security Note
• https://cablehaunt.com · Note
• https://vuldb.com/?id.148406 · Note