German ISP 'Alice' has been shipping custom embedded devices (DSL modems/routers etc.) for the past few years. Their first self-branded DSL modem, Alice Modem 1111, using firmware version 4.19, is prone to at least the following two security vulnerabilities (after it has passed initial configuration).
After accessing this URL, the modem fails to accept any additional connections via any of the protocols it supports (incl. telnet). The web interface is only available from within the LAN, but an insecure redirect from the Internet would work to exploit this.
Telefonica Germany, previously Hansenet Telekommunication, has been notified about these issues multiple times starting 2011-03-01. One day later, I received a response indicating this model is no longer being shipped and that there will be no fix for it. Additional attempts to get in touch, explaining that this does not help any of the clients who are already using this device, were not responded to (other than by confirming receipt).
The same ISP has their 'secure' client area accessed via https://www.alice-dsl.de which has obvious implementation flaws: https://www.ssllabs.com/ssldb/analyze.html?d=www.alice-dsl.de (which I notified the company about on 2010-12-20)
Naumann IT Security Consulting Samariterstr. 16 10247 Berlin Germany