Thomson Vulnerabilities

Timeline

The data in this chart does not reflect real data. It is dummy data, distorted and not usable in any way. You need an additional purchase to unlock this view to get access to more details of real data.

Type

Not Defined	20
IP Phone Software	4

Product

Thomson ST 2030 SIP phone	4
Thomson SpeedTouch	4
Thomson TCW710	4
Thomson Reuters Velocity Analytics Vhayu Analytic ...	2
Thomson Netg Web Skill Vantage Manager	2

Remediation

Official Fix	2
Temporary Fix	0
Workaround	6
Unavailable	6
Not Defined	10

Exploitability

High	2
Functional	0
Proof-of-Concept	14
Unproven	0
Not Defined	8

Access Vector

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	24

Authentication

Not Defined	0
High	0
Low	4
None	20

User Interaction

Not Defined	0
Required	6
None	18

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	8
≤6	6
≤7	0
≤8	8
≤9	0
≤10	2

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	4
≤5	10
≤6	0
≤7	2
≤8	6
≤9	2
≤10	0

VulDB

≤1	0
≤2	0
≤3	0
≤4	6
≤5	2
≤6	8
≤7	0
≤8	6
≤9	0
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	6
≤7	0
≤8	2
≤9	0
≤10	2

CNA

≤1	0
≤2	0
≤3	0
≤4	4
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Vendor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	16
<5k	8
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Today

<1k	24
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploit Market Volume

🔴 CTI Activities

Affected Products (19): Cable Modem (1), DWG849 (1), DWG850-4 (1), DWG855 (1), Desktop Extensions (1), Eikon (1), ST 2030 SIP phone (2), SpeedTouch (3), Speedtouch (1), TCW690 (1), TCW710 (6), THT741FTA (2), TWC305 (1), TWC315 (1), TWG87OUIR (1), TWG870 (1), UltraTax CS 2017 (2), Velocity Analytics Vhayu Analytic Server (1), Web Skill Vantage Manager (1)

Published	Base	Temp	Vulnerability	Prod	Exp	Rem	EPSS	CTI	CVE
08/31/2020	8.1	8.1	Thomson THT741FTA Telnet Service hard-coded password	Unknown	Not Defined	Not Defined	0.00051	0.00	CVE-2020-11618
08/31/2020	4.8	4.8	Thomson THT741FTA RSS Application certificate validation	Unknown	Not Defined	Not Defined	0.00070	0.00	CVE-2020-11617
08/27/2020	7.8	7.5	Thomson Reuters Eikon E1 IOT Orchestrator Security default permission	Unknown	Not Defined	Not Defined	0.00042	0.00	CVE-2019-10679
06/05/2019	9.8	9.8	Thomson Reuters Desktop Extensions Service Port 6677 ThomsonReuters.Desktop.Service.exe path traversal	Unknown	Not Defined	Not Defined	0.15636	0.03	CVE-2019-8385
12/23/2018	7.5	7.5	Thomson DWG849/DWG850-4/DWG855/TWG870 Credentials credentials management	Unknown	Not Defined	Not Defined	0.00406	0.00	CVE-2018-20394
07/26/2018	7.4	7.4	Thomson Reuters UltraTax CS 2017 Password Protection information disclosure	Unknown	Not Defined	Not Defined	0.00538	0.00	CVE-2018-14608
07/26/2018	6.2	6.2	Thomson Reuters UltraTax CS 2017 SMB information disclosure	Unknown	Not Defined	Not Defined	0.00216	0.00	CVE-2018-14607
02/19/2018	4.1	4.0	Thomson TCW710 RgUrlBlock.asp Persistent cross site scripting	Unknown	Proof-of-Concept	Workaround	0.00103	0.04	CVE-2018-25039
02/19/2018	4.1	4.0	Thomson TCW710 RgDhcp Persistent cross site scripting	Unknown	Proof-of-Concept	Workaround	0.00073	0.04	CVE-2018-25038
02/19/2018	4.1	4.0	Thomson TCW710 RgDdns Persistent cross site scripting	Unknown	Proof-of-Concept	Workaround	0.00073	0.04	CVE-2018-25037

14 more entries are not shown

🔒 Login Required

You need to signup and login to see more of the remaining 14 results.

◂ PreviousOverviewNext ▸

Do you need the next level of professionalism?

Upgrade your account now!