What’s Vulnerable › Vulnerabilities

CVE-2018-15555

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-06-28 · updated 2026-06-17
• Weakness: CWE-662

Description

On Telus Actiontec WEB6000Q v1.1.02.22 devices, an attacker can login with root level access with the user "root" and password "admin" by using the enabled onboard UART headers.

Affected products

• Actiontec Web6000Q Firmware: 1.1.02.22

References

• http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2019/Jun/1
• http://packetstormsecurity.com/files/153262/Telus-Actiontec-WEB6000Q-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2019/Jun/1

Get alerted when CVE-2018-15555 or the next vulnerability affects your stack