Philips DTR3502BFTA Dvb-t2 Firmware vulnerabilities

2 CVEs affecting Philips DTR3502BFTA Dvb-t2 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-11618, published 2020-08-31.

More from Philips.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-11617, published 2020-08-31. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which allows a man-in-the-middle attacker to…
• CVE-2020-11618, published 2020-08-31. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on the local network to achieve root access…