CVE-2008-1252

The Speedport W500 router’s login page (b_banner.stm) exposes the logon password via the pwd field in the HTML source, enabling remote attackers to obtain credentials over the network. No remediation details are provided in the supplied documents.