PatchTheCVEactiontec vulnerabilities
Recent CVEs affecting actiontec products. 5 tracked.
actiontec has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2024-06-19. Highest priority: CVE-2024-6145 (score 48/100).
- CVE-2024-6146 HIGH 8.8 MITIGATE Actiontec WCB6200Q uh_get_postdata_withupload Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-6145 HIGH 8.8 MITIGATE Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability
- CVE-2024-6144 HIGH 8.8 MITIGATE Actiontec WCB6200Q Multipart Boundary Stack-based Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-6143 HIGH 8.8 MITIGATE Actiontec WCB6200Q uh_tcp_recv_header Buffer Overflow Remote Code Execution Vulnerability
- CVE-2024-6142 HIGH 8.8 MITIGATE Actiontec WCB6200Q uh_tcp_recv_content Buffer Overflow Remote Code Execution Vulnerability
FAQ
How do I fix actiontec vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is actiontec being exploited right now?
None of the tracked actiontec CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which actiontec CVE should I patch first?
CVE-2024-6145 currently ranks highest (48/100): Actiontec WCB6200Q Cookie Format String Remote Code Execution Vulnerability.