> #####################################################################
> # Vendor: THOMSON Router
> # Product Name: TG585 v7
> # Software Release: 7.4.4.7
> # Vulnerability type: XSS
> # Risk rating: Medium
> #####################################################################
> # [Exploit]
> # http://[ROUTER_IP]/cgi/b/ic/connect/?url=<script>alert(1)</script>
> #####################################################################
> # [Credits]
> # Edgard Chammas [454447415244]
> # edgard.chammas (at) balamand.edu (dot) lb [email concealed]
> #####################################################################

Dear Mr Chammas,

Thank you for porting this security issue to our attention. This
vulnerability was already known to our service, and we have fixed it
since 8.2.7.6 release.

For your information, Technicolor products security issues may be
reported to the following address: security_at_technicolor.com. So for
you future potential findings, do not hesitate to directly contact us.

Technicolor is making its best to avoid security issues in its
products, but we never be 100% sure we missed no one.

Best regards, Technicolor Security Team.

--
Patrice Auffret | Security Assessment Coordinator
Security and Content Protection Labs | Office of the CTO
+33 (0)2 99 27 3246 | +33 (0)6 81 98 8007

[ reply ]