CVE-2017-14127: Command Injection in the Ping Module in the Web Interface on Technicolor TD5336 OI_Fw_v7 devices allows rem...

Security readout for executives and security teams

CVE-2017-14127 is a command injection flaw in a Technicolor TD5336 OI_Fw_v7 router web interface. A remote attacker could abuse the ping feature to run operating-system commands as root. That makes exposed management interfaces a serious business risk, but the source bundle does not name a vendor patch. Exposure is most likely where legacy Technicolor TD5336 OI_Fw_v7 devices have their web management interface reachable from untrusted networks. The bundle does not prove impact for other Technicolor models, firmware branches, or managed ISP variants. Treat exposed affected devices as high priority because compromise could give root control of network equipment. Focus first on internet-facing or third-party-accessible management interfaces, then determine whether the device can be patched or must be replaced. Mitigation focus: Identify and prioritize any Technicolor TD5336 OI_Fw_v7 devices.; Remove web administration exposure from the internet and untrusted networks.; Restrict management access to trusted administrative networks only..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.