Vendor coverage

thomsonstb vulnerabilities

Track published CVEs, severity trends, and remediation context for thomsonstb products.

RSS

Total vulnerabilities

Critical issues

Average CVSS score

6.8

Search results

Filtered vulnerability results

Showing 1-2 of 2 vulnerabilities.

Sort current page

CVE-2020-11618HighCVSS7.8Published Aug 31, 2020

THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to achieve root access via the TELNET protocol.

Affected vendor

thomsonstb

Affected product

tht741fta firmware

Coverage

2 affected product entries

CVSS

7.8

HIGH

Published

Aug 31, 2020

CVE-2020-11617MediumCVSS5.9Published Aug 31, 2020

The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to modify the data delivered to the client.