What’s Vulnerable › Vulnerabilities

CVE-2018-8827

• Severity: medium (CVSS 6.1 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-01-03 · updated 2026-06-17
• Weakness: CWE-79

Description

The admin web interface on Technicolor MediaAccess TG789vac v2 HP devices with firmware v16.3.7190-2761005-20161004084353 displays unsanitised user input, which allows an unauthenticated malicious user to embed JavaScript into the Log viewer interface via a crafted HTTP Referer header, aka XSS.

Affected products

• Technicolor Tg789Vac Firmware: 16.3.7190-2761005-20161004084353

References

• http://45.32.113.185/075a6fa2d5db3bf3457896bee6db6787.html
• http://45.32.113.185/075a6fa2d5db3bf3457896bee6db6787.html

Get alerted when CVE-2018-8827 or the next vulnerability affects your stack