Denial of Service Vulnerability in Multiple Aztech Routers

Aztech DSL5018EN, DSL705E and DSL705EU are router products from the Aztech Group of companies in Singapore. A denial of service vulnerability exists in multiple Aztech routers. An attacker could exploit this vulnerability to crash an affected device, resulting in a denial of service...

Information disclosure

Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via vectors involving the ROM file...

CVE-2014-6435

CVE-2014-6435 affects Aztech ADSL router models DSL5018EN (1T1R), DSL705E, and DSL705EU. The vulnerability is in the CGI script /cgi-bin/AZ_Retrain.cgi which does not require authentication, enabling an unauthenticated remote attacker to trigger a denial of service by resetting WAN connectivity. ...

CVE-2014-6437

CVE-2014-6437 concerns Aztech ADSL devices (DSL5018EN 1T1R, DSL705E, DSL705EU) where an information-disclosure vulnerability exists involving ROM file vectors. The NVD entry describes remote attackers obtaining sensitive device configuration data, with CVSS nvd2.0 base score 5.0 (Network, Low att...

CVE-2014-6436: Improper Authentication

Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login...

CVE-2014-6437: Exposure of Sensitive Information to an Unauthorized Actor

Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices allow remote attackers to obtain sensitive device configuration information via vectors involving the ROM file...

PT-2018-4287

Name of the Vulnerable Software and Affected Versions Aztech ADSL DSL5018EN 1T1R version not specified Aztech ADSL DSL705E version not specified Aztech ADSL DSL705EU version not specified Description The issue allows remote attackers to obtain sensitive device configuration information. This is...

PT-2018-4285

Name of the Vulnerable Software and Affected Versions Aztech ADSL DSL5018EN 1T1R version not specified Aztech ADSL DSL705E version not specified Aztech ADSL DSL705EU version not specified Description The issue is related to the cgi-bin/AZ Retrain.cgi endpoint, which does not check for...

CVE-2014-6435: Improper Authentication

cgi-bin/AZRetrain.cgi in Aztech ADSL DSL5018EN 1T1R, DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service WAN connectivity reset via a direct request...

PT-2018-4286

Name of the Vulnerable Software and Affected Versions Aztech ADSL DSL5018EN 1T1R version not specified Aztech ADSL DSL705E version not specified Aztech ADSL DSL705EU version not specified Description The issue is related to improper session management in the affected devices, allowing remote...

Aztech Routers - '/cgi-bin/AZ_Retrain.cgi' Denial of Service

/ source: https://www.securityfocus.com/bid/69809/info Multiple Aztech routers are prone to a denial-of-service vulnerability. Attackers may exploit this issue to cause an affected device to crash, resulting in a denial-of-service condition. Aztech DSL5018EN, DSL705E and DSL705EU are vulnerable. ...