Lucene search

[email protected]CVE-2001-1425

HistoryMar 22, 2005 - 5:00 a.m.

CVE-2001-1425

2005-03-2205:00:00

[email protected]

web.nvd.nist.gov

alcatel speed touch

firmware khdsaa.108

khdsaa.132-khdsaa.134

remote attacks

privilege escalation.

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.

Affected configurations

NVD

Node

alcatelspeed_touch_homeMatchkhdsaa.108

alcatelspeed_touch_homeMatchkhdsaa.132

alcatelspeed_touch_homeMatchkhdsaa.133

alcatelspeed_touch_homeMatchkhdsaa.134

CPENameOperatorVersion
alcatel:speed_touch_homealcatel speed touch homeeqkhdsaa.108
alcatel:speed_touch_homealcatel speed touch homeeqkhdsaa.132
alcatel:speed_touch_homealcatel speed touch homeeqkhdsaa.133
alcatel:speed_touch_homealcatel speed touch homeeqkhdsaa.134

CPE	Name	Operator	Version
alcatel:speed_touch_home	alcatel speed touch home	eq	khdsaa.108
alcatel:speed_touch_home	alcatel speed touch home	eq	khdsaa.132
alcatel:speed_touch_home	alcatel speed touch home	eq	khdsaa.133
alcatel:speed_touch_home	alcatel speed touch home	eq	khdsaa.134

References

security.sdsc.edu/self-help/alcatel/alcatel-bugs.html

www.cert.org/advisories/CA-2001-08.html

www.kb.cert.org/vuls/id/243592

www.securityfocus.com/archive/1/175229

www.securityfocus.com/bid/2568

exchange.xforce.ibmcloud.com/vulnerabilities/6354

7.5 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

7.1 High

AI Score

Confidence

Low

0.018 Low

EPSS

Percentile

88.3%

JSON

Related for CVE-2001-1425

nvd1 cvelist1 openvas1