EUVD-2008-1260

Malware in sbrugna...

Default credentials

bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...

CVE-2008-1252

The Speedport W500 router’s login page (b_banner.stm) exposes the logon password via the pwd field in the HTML source, enabling remote attackers to obtain credentials over the network. No remediation details are provided in the supplied documents.

CVE-2008-1252

bbanner.stm aka the login page on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source...