CVE-2015-0554
9.4 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:N/A:C
6.7 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.5%
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| adb:p.dga4001n_firmware | adb p.dga4001n firmware | eq | pdg_tef_sp_4.06l.6 |
Related
9.4 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:N/A:C
6.7 Medium
AI Score
Confidence
Low
0.014 Low
EPSS
Percentile
86.5%