https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2020-16134.htmlhttps://patchthecve.com/cve/CVE-2020-16134.htmlWed, 17 Jun 2026 02:57:45 +0000HIGH 8.0: An issue was discovered on Swisscom Internet Box 2, Internet Box Standard, Internet Box Plus prior to 10.04.38, Internet Box 3 prior to 11.01.20, and Internet Box light prior to 08.06.06. Given the (user-configurable) credentials for the local Web interface or physical access to a device's plus or rhttps://patchthecve.com/cve/CVE-2019-19942.htmlhttps://patchthecve.com/cve/CVE-2019-19942.htmlWed, 17 Jun 2026 02:27:29 +0000HIGH 7.5: Missing output sanitation in Swisscom Centro Grande Centro Grande before 6.16.12, Centro Business 1.0 (ADB) before 7.10.18, and Centro Business 2.0 before 8.02.04 allows a remote attacker to perform DNS spoofing against the web interface via crafted hostnames in DHCP requests.https://patchthecve.com/cve/CVE-2019-19941.htmlhttps://patchthecve.com/cve/CVE-2019-19941.htmlWed, 17 Jun 2026 02:27:29 +0000MEDIUM 5.4: Missing hostname validation in Swisscom Centro Grande before 6.16.12 allows a remote attacker to inject its local IP address as a domain entry in the DNS service of the router via crafted hostnames in DHCP requests, causing XSS.https://patchthecve.com/cve/CVE-2019-19940.htmlhttps://patchthecve.com/cve/CVE-2019-19940.htmlWed, 17 Jun 2026 02:27:28 +0000HIGH 7.2: Incorrect input sanitation in text-oriented user interfaces (telnet, ssh) in Swisscom Centro Grande before 6.16.12 allows remote authenticated users to execute arbitrary commands via command injection.https://patchthecve.com/cve/CVE-2018-16596.htmlhttps://patchthecve.com/cve/CVE-2018-16596.htmlWed, 17 Jun 2026 01:44:31 +0000HIGH 7.5: A stack-based buffer overflow in the LAN UPnP service running on UDP port 1900 of Swisscom Internet-Box (2, Standard, and Plus) prior to v09.04.00 and Internet-Box light prior to v08.05.02 allows remote code execution. No authentication is required to exploit this vulnerability. Sending a simple UDPhttps://patchthecve.com/cve/CVE-2018-16225.htmlhttps://patchthecve.com/cve/CVE-2018-16225.htmlWed, 17 Jun 2026 01:43:55 +0000MEDIUM 6.5: The QBee MultiSensor Camera through 4.16.4 accepts unencrypted network traffic from clients (such as the QBee Cam application through 1.0.5 for Android and the Swisscom Home application up to 10.7.2 for Android), which results in an attacker being able to reuse cookies to bypass authentication and dhttps://patchthecve.com/cve/CVE-2018-6766.htmlhttps://patchthecve.com/cve/CVE-2018-6766.htmlWed, 17 Jun 2026 02:02:14 +0000HIGH 7.8: Swisscom TVMediaHelper 1.1.0.50 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing that could ehttps://patchthecve.com/cve/CVE-2018-6765.htmlhttps://patchthecve.com/cve/CVE-2018-6765.htmlWed, 17 Jun 2026 02:02:14 +0000HIGH 7.8: Swisscom MySwisscomAssistant 2.17.1.1065 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded. It allows an attacker to load a .dll of the attacker's choosing tha