Vulnerabilities > T Mobile > TM Ac1900 > High

DATE CVE VULNERABILITY TITLE RISK
2014-11-04 CVE-2014-2718 Insufficient Verification of Data Authenticity vulnerability in multiple products
ASUS RT-AC68U, RT-AC66R, RT-AC66U, RT-AC56R, RT-AC56U, RT-N66R, RT-N66U, RT-N56R, RT-N56U, and possibly other RT-series routers before firmware 3.0.0.4.376.x do not verify the integrity of firmware (1) update information or (2) downloaded updates, which allows man-in-the-middle (MITM) attackers to execute arbitrary code via a crafted image.
7.1
2014-04-22 CVE-2013-5948 OS Command Injection vulnerability in multiple products
The Network Analysis tab (Main_Analysis_Content.asp) in the ASUS RT-AC68U and other RT series routers with firmware before 3.0.0.4.374.5047 allows remote authenticated users to execute arbitrary commands via shell metacharacters in the Target field (destIP parameter).
network
t-mobile asus CWE-78
8.5
2013-11-23 CVE-2013-1813 Permissions, Privileges, and Access Controls vulnerability in multiple products
util-linux/mdev.c in BusyBox before 1.21.0 uses 0777 permissions for parent directories when creating nested directories under /dev/, which allows local users to have unknown impact and attack vectors.
local
low complexity
redhat t-mobile busybox CWE-264
7.2