Aztech Modem Routers - Session Hijacking

source: https://www.securityfocus.com/bid/69811/info Multiple Aztech Modem Routers are prone to a session-hijacking vulnerability. An attacker can exploit this issue to gain unauthorized access to the affected device. !/usr/bin/perl Title: Aztech Modem Broken Session Management Exploit Author: Er...

Aztech Modem Routers - Information Disclosure

/ source: https://www.securityfocus.com/bid/69808/info Aztech Modem Routers are prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. / HOST=$1 PORT=$2 PARM1="\x48\x6f\x73\x74\x3a\x20"...

Aztech Routers - '/cgi-bin/AZ_Retrain.cgi' Denial of Service

/ source: https://www.securityfocus.com/bid/69809/info Multiple Aztech routers are prone to a denial-of-service vulnerability. Attackers may exploit this issue to cause an affected device to crash, resulting in a denial-of-service condition. Aztech DSL5018EN, DSL705E and DSL705EU are vulnerable. ...

Aztech Modem Routers - Session Hijacking

Aztech Modem Routers - Session Hijacking source: https://www.securityfocus.com/bid/69811/info Multiple Aztech Modem Routers are prone to a session-hijacking vulnerability. An attacker can exploit this issue to gain unauthorized access to the affected device. !/usr/bin/perl Title: Aztech Modem...

Aztech Modem Routers - Information Disclosure

Aztech Modem Routers - Information Disclosure / source: https://www.securityfocus.com/bid/69808/info Aztech Modem Routers are prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. / HOST=$1...

Aztech DSL5018EN / DSL705E / DSL705EU DoS / Broken Session Management

PRODUCT DESCRIPTION The Aztech ADSL family of modems/routes are shipped to residential and SOHO users that desires speed from 150-300mbps rate. This modem/router also supports IEEE802.11b/g/n as a Wireless LAN Access point. The vulnerable model numbers are: DSL5018EN 1T1R Shipped with Globe Telec...

CVE-2008-6588

Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed...

Default configuration

Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed...

CVE-2008-6588

Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed...

CVE-2008-6588

CVE-2008-6588 involves Aztech ADSL2/2+ 4-port routers with a default "isp" account and password, enabling remote access if not changed. Connected documents corroborate a default-credentials issue across several Aztech models, but no concrete patch, mitigation steps, or exploitation details are pr...

CVE-2008-6588: Undefined Security Weakness

Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed...

CVE-2008-6554

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string...

Design/Logic Flaw

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string...

CVE-2008-6554

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string...

CVE-2008-6554

The CVE-2008-6554 entry applies to Aztech ADSL2/2+ 4-port routers running version 3.7.0 build 070426. The vulnerability is in the CGI component (cgi-bin/script) where an attacker can supply shell metacharacters in the query string to execute arbitrary commands remotely. This could enable remote c...

CVE-2008-6554: Improper Neutralization of Special Elements used in an OS Command

cgi-bin/script in Aztech ADSL2/2+ 4-port router 3.7.0 build 070426 allows remote attackers to execute arbitrary commands via shell metacharacters in the query string...

Aztech ADSL2/2+ 4 Port default password

Playing around with the configuration files will reveal…..even though the admin accounts password has been changed, there is still another administrative account burried in there. username: isp password: isp Sneaks one past [email protected] http://www.elitter.net...

Aztech ADSL routers backdoor

It's possible to obtain administrative access with undocumented account isp/isp...

aztech-exec.txt

http://www.aztech.com cat versions VERSION=3.7.0 BUILD=070426 BOARD=AR7RD FSSTAMP=20070426171252 Example: $ lynx "http://192.168.0.5/cgi-bin/script?system%20&%20whoami" --source root $ lynx "http://192.168.0.5/cgi-bin/script?system%20&%20ls /" --source bin dev etc lib proc sbin usr var var.tar $...

Aztech ADSL2/2+ 4 Port remote root

http://www.aztech.com cat versions VERSION=3.7.0 BUILD=070426 BOARD=AR7RD FSSTAMP=20070426171252 Example: $ lynx "http://192.168.0.5/cgi-bin/script?system20&20whoami" --source root $ lynx "http://192.168.0.5/cgi-bin/script?system20&20ls /" --source bin dev etc lib proc sbin usr var var.tar $...