CVE-2014-1677

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Technicolor TC7200 with firmware STD6.01.12 could allow remote attackers to obtain sensitive information.

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://seclists.org/fulldisclosure/2016/Jul/67Exploit, Third Party Advisory, VDB Entry
http://www.exploit-db.com/exploits/31894Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/538955/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/91578
https://packetstormsecurity.com/files/125388Exploit, Third Party Advisory, VDB Entry
http://seclists.org/fulldisclosure/2016/Jul/67Exploit, Third Party Advisory, VDB Entry
http://www.exploit-db.com/exploits/31894Exploit, Third Party Advisory, VDB Entry
http://www.securityfocus.com/archive/1/538955/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/91578
https://packetstormsecurity.com/files/125388Exploit, Third Party Advisory, VDB Entry

Timeline

Published: Apr 3, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-16794.3Cross-site scripting (XSS) vulnerability in Open-Xchange (OX) AppSuite before 7.2.2-rev31, 7.4.0 before 7.4.0-rev27, and 7.4.1 before 7.4.1-CVE-2014-16806.9Untrusted search path vulnerability in Bandisoft Bandizip before 3.10 allows local users to gain privileges via a Trojan horse dwmapi.dll fi CVE-2014-168110.0Multiple unspecified vulnerabilities in Google Chrome before 32.0.1700.102 have unknown impact and attack vectors, related to 12 "security f CVE-2014-16824.0The API in Zabbix before 1.8.20rc1, 2.0.x before 2.0.11rc1, and 2.2.x before 2.2.2rc1 allows remote authenticated users to spoof arbitrary u CVE-2014-16836.8The bashMail function in cms/data/skins/techjunkie/fragments/contacts/functions.php in SkyBlueCanvas CMS before 1.1 r248-04, when the pid pa CVE-2014-16844.3The ASF_ReadObject_file_properties function in modules/demux/asf/libasf.c in the ASF Demuxer in VideoLAN VLC Media Player before 2.1.3 allow CVE-2014-16855.5The Frontend in Zabbix before 1.8.20rc2, 2.0.x before 2.0.11rc2, and 2.2.x before 2.2.2rc1 allows remote "Zabbix Admin" users to modify the CVE-2014-16865.3MediaWiki 1.18.0 allows remote attackers to obtain the installation path via vectors related to thumbnail creation.CVE-2014-16902.6The help function in net/netfilter/nf_nat_irc.c in the Linux kernel before 3.12.8 allows remote attackers to obtain sensitive information fr CVE-2014-16917.5The framework/Util/lib/Horde/Variables.php script in the Util library in Horde before 5.1.1 allows remote attackers to conduct object inject CVE-2014-16927.3The hash_buffer function in schnorr.c in OpenSSH through 6.4, when Makefile.inc is modified to enable the J-PAKE protocol, does not initiali CVE-2014-16937.5Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context-dependent attackers to inject arbitrary FTP com