CVE-2005-2583

The CVE-2005-2583 entry describes a vulnerability in the Mentor ADSL-FR4II router (firmware 2.00.0111) where an undocumented web server running on TCP port 5678 can be accessed by local users to gain access. The available connected documentation confirms the affected device and the root cause as ...

DSL-504T.txt

Device: CUSTOMER=DLinkEU MODEL=DSL-504T Version: only tested with VERSION=V1.00B01T16.EU.20040217 Bugs: i remote firmware upgrade without password ii config retrieval without password Exploitation: remote Date: 26/05/2005 Status: vendor not contacted Workaround: disable remote web management...

Multiple Mentor ADSL router vulnerabilities

Undocumented Web-interface TCP/5678, no passwords in default configuration, DoS, cleartext passwords in configuration file...

CVE-2001-1484

CVE-2001-1484 concerns Alcatel ADSL modems where the TFTP service can be accessed without authentication. A remote attacker on the LAN can use a bounce attack to modify firmware and configuration, implying network-based access with low complexity and potential partial impacts to confidentiality, ...

CVE-2001-1484

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol TFTP to modify firmware and configuration via a bounce attack from a system on the local area network LAN side, which is allowed to access TFTP without authentication...

[Full-disclosure] [ISR] Zyxel Prestige 650R-31 Denial Of Service

|| || Infobyte Security Research || www.infobyte.com.ar || 04.08.2005 || .:: SUMMARY Prestige 650R-31 ADSL Router -CPU exausting handling malformed fragmented packets Affected ZyNOS FW v3.40KO.1 It is suspected that all previous versions of ZyNOS are vulnerable. .:: BACKGROUND Zyxel Prestige 600...

CVE-2004-2045

The CVE-2004-2045 issue affects the Conceptronic CADSLR1 ADSL router (firmware 3.04n). The HTTP administration interface is vulnerable to a denial-of-service (device reboot) caused by sending an HTTP request with a long username. The root cause is not detailed beyond the long username triggering ...

CVE-2004-1790

This CVE affects Edimax AR-6004 ADSL Routers. The issue is a Cross-site scripting (XSS) vulnerability in the web management interface, allowing remote attackers to inject arbitrary web script or HTML through the URL. The provided documents do not specify affected firmware versions, exact vulnerab...

CVE-2004-2045

The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...

CVE-2004-1791

CVE-2004-1791 concerns Edimax AR-6004 ADSL Routers where the web management interface uses a default administrator name and password that also appear as the default login text. Multiple connected sources corroborate that this enables remote access to the device (attack surface is network-enabled)...

CVE-2004-1791

The web management interface in Edimax AR-6004 ADSL Routers uses a default administrator name and password, which also appear as the default login text for the management interface, which allows remote attackers to gain access...

CVE-2004-1790

Cross-site scripting XSS vulnerability in the web management interface in Edimax AR-6004 ADSL Routers allows remote attackers to inject arbitrary web script or HTML via the URL...

CVE-2005-0864

The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...

CVE-2005-0865

Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the 1 root, 2 admin, or 3 user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi...

CVE-2004-0641

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers ISNs, which allows remote attackers to spoof or hijack TCP connections...

CVE-2004-0641

The CVE-2004-0641 issue affects Thomson SpeedTouch 510 ADSL Router (firmware GV8BAA3.270, and possibly earlier). The vulnerability arises from a predictable TCP Initial Sequence Number (ISN) generator, enabling remote attackers to spoof or hijack TCP connections. Exploitation details are describe...

Netcomm 1300NB DSL Modem Denial of Service

There is an issue with the Netcomm 1300NB DSL Modem in regards to a Denial of Service attack. By sending off the following ping command in four seperate shells or windows the WAN interface on the Netcomm DSL Modem locks up and the device must be rebooted to get Internet Activity. The Netcomm ADSL...

CVE-2005-0864

The Boa web server, as used in Samsung ADSL Modem SMDK8947v1.2 and possibly other products, allows remote attackers to read arbitrary files via a full pathname in the HTTP request...

CVE-2005-0865

The CVE-2005-0865 issue affects Samsung ADSL Modem SMDK8947v1.2, where default credentials (root, admin, or user) enable remote privilege escalation via Telnet or HTTP to adsl.cgi. Root cause: use of default passwords leading to unauthorized access. Impact: authenticated/privileged access with ne...

CVE-2005-0865

Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the 1 root, 2 admin, or 3 user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi...