CyberSecBulletin

Actiontec vulnerabilities

We track 5 vulnerabilities in Actiontec products across 2 products. 5 are rated high or critical, and none are known to be exploited. The most recent was published on June 19, 2024.

5vulnerabilities
0critical
5high
0exploited
8.8average CVSS score

Latest Actiontec vulnerabilities

  • 8.8 High severity

    WCB6200Q: Out-of-bounds Write

    CVE-2024-6146ActiontecEPSS 1.12%

    Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authenticatio

  • 8.8 High severity

    WCB6200Q: Use of Externally-Controlled Format String

    CVE-2024-6145ActiontecEPSS 1.21%

    Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to exploit this

  • 8.8 High severity

    WCB6200Q: Out-of-bounds Write

    CVE-2024-6144ActiontecEPSS 1.12%

    Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not

  • 8.8 High severity

    WCB6200Q: Buffer Copy without Checking Size of Input

    CVE-2024-6143ActiontecEPSS 1.12%

    Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required to

  • 8.8 High severity

    WCB6200Q: Buffer Copy without Checking Size of Input

    CVE-2024-6142ActiontecEPSS 1.12%

    Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Actiontec WCB6200Q routers. Authentication is not required t