← back
CVE-2005-0494

CVE-2005-0494

23Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendepss 2.6%
from disclosure to weapon0 days
Published on NVDFeb 21
1st PoCFeb 19
exploitation probability
2.6%top 16% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
Affected products
n/a · n/a
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.