CVE-2014-6435: Improper Authentication

cgi-bin/AZRetrain.cgi in Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service WAN connectivity reset via a direct request...

CVE-2014-6437: Exposure of Sensitive Information to an Unauthorized Actor

Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via vectors involving the ROM file...

PT-2018-4285

Name of the Vulnerable Software and Affected Versions Aztech ADSL DSL5018EN 1T1R version not specified Aztech ADSL DSL705E version not specified Aztech ADSL DSL705EU version not specified Description The issue is related to the cgi-bin/AZ Retrain.cgi endpoint, which does not check for...

PT-2018-4287

Name of the Vulnerable Software and Affected Versions Aztech ADSL DSL5018EN 1T1R version not specified Aztech ADSL DSL705E version not specified Aztech ADSL DSL705EU version not specified Description The issue allows remote attackers to obtain sensitive device configuration information. This is...

CVE-2014-6436: Improper Authentication

Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login...