Thomson Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	22
IP Phone Software	2

Product

Thomson TCW710	8
Thomson SpeedTouch	4
Thomson Reuters UltraTax CS 2017	4
Thomson Reuters Velocity Analytics Vhayu Analytic ...	2
Thomson Netg Web Skill Vantage Manager	2

Remediation

Official Fix	2
Temporary Fix	0
Workaround	10
Unavailable	4
Not Defined	8

Exploitability

High	2
Functional	0
Proof-of-Concept	14
Unproven	0
Not Defined	8

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	2
Network	22

Authentication

Not Defined	0
High	0
Low	8
None	16

User Interaction

Not Defined	0
Required	10
None	14

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	10
≤6	2
≤7	2
≤8	6
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	8
≤5	4
≤6	0
≤7	4
≤8	4
≤9	2
≤10	2

VulDB

≤1	0
≤2	0
≤3	0
≤4	8
≤5	4
≤6	2
≤7	0
≤8	6
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	8
≤7	0
≤8	4
≤9	0
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	8
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	2
<2k	14
<5k	8
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	24
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (19): Cable Modem (1), DWG849 (1), DWG850-4 (1), DWG855 (1), Desktop Extensions (1), Eikon (1), ST 2030 SIP phone (2), SpeedTouch (3), Speedtouch (1), TCW690 (1), TCW710 (6), THT741FTA (2), TWC305 (1), TWC315 (1), TWG87OUIR (1), TWG870 (1), UltraTax CS 2017 (2), Velocity Analytics Vhayu Analytic Server (1), Web Skill Vantage Manager (1)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	CTI	EPSS	CVE
08/31/2020	8.1	8.1	Thomson THT741FTA Telnet Service hard-coded password	Unknown	Not Defined	Not Defined	0.00	0.00048	CVE-2020-11618
08/31/2020	4.8	4.8	Thomson THT741FTA RSS Application certificate validation	Unknown	Not Defined	Not Defined	0.00	0.00070	CVE-2020-11617
08/27/2020	7.8	7.5	Thomson Reuters Eikon E1 IOT Orchestrator Security default permission	Unknown	Not Defined	Not Defined	0.00	0.00042	CVE-2019-10679
06/05/2019	9.8	9.8	Thomson Reuters Desktop Extensions Service Port 6677 ThomsonReuters.Desktop.Service.exe path traversal	Unknown	Not Defined	Not Defined	0.00	0.15636	CVE-2019-8385
12/23/2018	7.5	7.5	Thomson DWG849/DWG850-4/DWG855/TWG870 Credentials credentials management	Unknown	Not Defined	Not Defined	0.00	0.01546	CVE-2018-20394
07/26/2018	7.4	7.4	Thomson Reuters UltraTax CS 2017 Password Protection information disclosure	Unknown	Not Defined	Not Defined	0.00	0.00538	CVE-2018-14608
07/26/2018	6.2	6.2	Thomson Reuters UltraTax CS 2017 SMB information disclosure	Unknown	Not Defined	Not Defined	0.06	0.00216	CVE-2018-14607
02/19/2018	4.1	4.0	Thomson TCW710 RgUrlBlock.asp Persistent cross site scripting	Unknown	Proof-of-Concept	Workaround	0.05	0.00099	CVE-2018-25039
02/19/2018	4.1	4.0	Thomson TCW710 RgDhcp Persistent cross site scripting	Unknown	Proof-of-Concept	Workaround	0.05	0.00070	CVE-2018-25038
02/19/2018	4.1	4.0	Thomson TCW710 RgDdns Persistent cross site scripting	Unknown	Proof-of-Concept	Workaround	0.05	0.00070	CVE-2018-25037

14 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

◂ PreviousOverviewNext ▸

Want to stay up to date on a daily basis?

Enable the mail alert feature now!