Vulnerability Details CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.018
EPSS Ranking 82.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://www.cert.org/advisories/CA-2001-08.html
- http://www.kb.cert.org/vuls/id/490344
- http://www.securityfocus.com/archive/1/175229
- http://www.securityfocus.com/bid/2566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6336
- http://www.cert.org/advisories/CA-2001-08.html
- http://www.kb.cert.org/vuls/id/490344
- http://www.securityfocus.com/archive/1/175229
- http://www.securityfocus.com/bid/2566
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6336
Products affected by CVE-2001-1426
-
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108
-
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132
-
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133
-
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134