CVE-2019-18396: Technicolor TD5130V2 Firmware

High severity, CVSS 7.2. EPSS: 16.2% chance of exploitation in the next 30 days.

An issue was discovered in certain Oi third-party firmware that may be installed on Technicolor TD5130v2 devices. A Command Injection in the Ping module in the Web Interface in OI_Fw_V20 allows remote attackers to execute arbitrary OS commands in the pingAddr parameter to mnt_ping.cgi. NOTE: This may overlap CVE-2017–14127.

Affected products

• Technicolor TD5130V2 Firmware: version oi_fw_v20 only

Published 2019-10-31. Last modified 2026-06-17.