CVE-2005-0865

Samsung ADSL Modem SMDK8947v1.2 uses default passwords for the 1 root, 2 admin, or 3 user users, which allows remote attackers to gain privileges via Telnet or an HTTP request to adsl.cgi...

CVE-2001-1424

The CVE-2001-1424 entry concerns the Alcatel Speed Touch ADSL modem. Affected firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 exposes a blank default password, enabling remote attackers to gain unauthorized access. Exposure is network‑vector with low complexity and no authentication r...

CVE-2001-1424

Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access...

Exploit Labs Security Advisory 2005.2

------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...

[Full-disclosure] Samsung ADSL Modem Vulnerability

------------------------------------------------------------ - EXPL-A-2005-002 exploitlabs.com Advisory 031 - ------------------------------------------------------------ - Samsung ADSL Modem - AFFECTED PRODUCTS ================= Samsung ADSL Modem Samgsung Eletronics http://www.samsung.com DETAI...

CVE-2004-2045

The HTTP administration interface on Conceptronic CADSLR1 ADSL router running firmware 3.04n allows remote attackers to cause a denial of service device reboot via an HTTP request with a long username...

CVE-2004-2457

Unspecified vulnerability in 3Com OfficeConnect ADSL 11g Router allows remote attackers to cause a denial of service crash via a large amount of UDP traffic...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

conexant chipset ADSL modems unauthorized access

It's possible to manage device with built-in passord via TCP/254...

dynalink.Backdoor.txt

I was playing with a Dynalink RTA 230 http://www.dynalink.co.nz/products/rta230.htm, a linux based mips-cored adsl router. Looking at embedded linux system, i've found something like a backdoor: cat /etc/passwd admin:xxxxxobscuredxxxxx:0:0:Administrator:/:/bin/sh...

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

[Full-Disclosure] iDEFENSE Security Advisory 08.05.04: Thompson SpeedTouch Home ADSL Modem Predictable TCP ISN Generation

Thompson SpeedTouch Home ADSL Modem Predictable TCP ISN Generation iDEFENSE Security Advisory 08.05.04 www.idefense.com/application/poi/display?id=120&type=vulnerabilities August 5, 2004 I. BACKGROUND The Thompson formerly Alcatel SpeedTouch is an ADSL router for home and business providing a...

CVE-2004-0680

The CVE concerns the Zoom X3 ADSL modem: a terminal on port 254 can be accessed using the default HTML management password even if the HTTP interface password was changed, potentially granting remote attackers unauthorized access. No exploitation details are provided in the connected documents.

CVE-2004-0680

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access...

CVE-2004-0477

CVE-2004-0477 affects the 3Com OfficeConnect Remote 812 ADSL Router. The vulnerability allows remote authentication bypass through repeated login attempts with any username/password. Public details describe this as an ADSL router bypass; root cause and remediation are not provided in the initial ...

CVE-2004-0477

Unknown vulnerability in 3Com OfficeConnect Remote 812 ADSL Router allows remote attackers to bypass authentication via repeated attempts using any username and password. NOTE: this identifier was inadvertently re-used for another issue due to a typo; that issue was assigned CVE-2004-0447. This...

CVE-2004-0616

The BT Voyager 2000 Wireless ADSL Router has a default public SNMP community name, which allows remote attackers to obtain sensitive information such as the password, which is stored in plaintext...

CVE-2004-0616

The vulnerability CVE-2004-0616 affects the BT Voyager 2000 Wireless ADSL Router, where a default public SNMP community name allows remote attackers to obtain sensitive information (plaintext password). Root cause: default SNMP community name. Impact: confidentiality is partially affected; exploi...

[Full-Disclosure] Wireless Modem (BT Voyager 2000 Wireless ADSL Router cleartext password)

Arhont Ltd. - Information Security Arhont Advisory by: Konstantin Gavrilenko http://www.arhont.com Advisory: cleartext account password obtainable using SNMP Class: design/configuration bug Test platform: BT Voyager 2000 Wireless ADSL Router Vendor Contact Date: 10/06/2004 PD release date:...

CVE-2004-0476

CVE-2004-0476 affects 3Com OfficeConnect Remote 812 ADSL Router (firmware 1.1.9.4). A buffer overflow in the Telnet port handling allows remote attackers to cause a denial of service (reboot or packet loss) by sending a long string containing Telnet escape characters. Exploitation details and spe...