CVE-2018-15555

CRITICAL

Telus Actiontec WEB6000Q v1.1.02.22 - Privilege Escalation

Title source: llm
STIX 2.1

Description

On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.

References (2)

Core 2
Core References
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2019/Jun/1

Scores

CVSS v3 9.8
EPSS 0.0297
EPSS Percentile 85.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-662
Status published
Products (1)
actiontec/web6000q_firmware 1.1.02.22
Published Jun 28, 2019
Tracked Since Feb 18, 2026