DNS Rebinding Vulnerability in Technicolor Cable Modem Products
CVE-2019-19495

9.8CRITICAL

Key Information:

Vendor: Technicolor
Status: Tc7230 Steb Firmware
Vendor: CVE Published:; 8 January 2020

🔔 Create Technicolor Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2019-19495?

The web interface of the Technicolor TC7230 STEB 01.25 is susceptible to a DNS rebinding vulnerability that can be exploited by remote attackers. By leveraging this flaw, an attacker can manipulate the cable modem using JavaScript running in a victim's browser. This manipulation enables the attacker to configure the modem to expose its internal TELNET server to external networks, potentially allowing unauthorized access to a root shell. If exploited, this could lead to significant security risks for users' home networks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2019-19495 - Proof of Concept