CVE-2018-20379: Technicolor DPC3928SL Firmware

Medium severity, CVSS 4.7. EPSS: 0.6% chance of exploitation in the next 30 days.

Technicolor DPC3928SL D3928SL-PSIP-13-A010-c3420r55105-160428a devices allow XSS via a Cross Protocol Injection attack with setSSID of 1.3.6.1.4.1.4413.2.2.2.1.18.1.2.1.1.3.10001.

Affected products

• Technicolor DPC3928SL Firmware: version d3928sl-psip-13-a010-c3420r55105-160428a only

Published 2018-12-23. Last modified 2026-06-17.