Vulnerability Details CVE-2014-6435
cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service (WAN connectivity reset) via a direct request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.131
EPSS Ranking 93.8%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References
- http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
- http://www.securityfocus.com/bid/69809
- http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
- http://www.securityfocus.com/bid/69809
Products affected by CVE-2014-6435
-
cpe:2.3:h:aztech:adsl_dsl5018en_(1t1r):-
-
cpe:2.3:h:aztech:dsl705e:-
-
cpe:2.3:h:aztech:dsl705eu:-
-
cpe:2.3:o:aztech:adsl_dsl5018en_(1t1r)_firmware:-
-
cpe:2.3:o:aztech:dsl705e_firmware:-
-
cpe:2.3:o:aztech:dsl705eu_firmware:-