10
CVSSv2

CVE-2018-15555

Published: 28/06/2019 Updated: 24/08/2020
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

actiontec web6000q_firmware 1.1.02.22

Exploits

Telus Actiontec WEB6000Q with firmware 110222 suffers from both local and remote privilege escalation vulnerabilities ...