CVE-2001-1425

Published Apr 10, 2001

Last updated 7 years ago

Overview

Description: The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
Source: cve@mitre.org
NVD status: Modified

Hype score: Not currently trending

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "91040F84-5FFF-455F-B81A-EE2F450E878B"
          },
          {
            "criteria": "cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5983F496-F470-4347-95DA-CF59EB3956E3"
          },
          {
            "criteria": "cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "13D1F571-1947-4FDB-AE33-D1FD86E9116B"
          },
          {
            "criteria": "cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "10C8A4DE-F452-4063-A82E-0033190C490A"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 2.0

Weaknesses

Configurations

References