Unscored severity · published Apr 10, 2001
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain…
–
CVSS
3.7%
EPSS
No
On KEV
Description
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.7% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Speed Touch Home · Alcatel
khdsaa.108; khdsaa.132; khdsaa.133; khdsaa.134 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1425
security.sdsc.edu
http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html
US Government Resource
http://www.cert.org/advisories/CA-2001-08.html
US Government Resource
http://www.kb.cert.org/vuls/id/243592
www.securityfocus.com
http://www.securityfocus.com/archive/1/175229
Vendor Advisory
http://www.securityfocus.com/bid/2568
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6354
More from Speed Touch Home
–
CVE-2002-0119
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection
–
CVE-2001-1424
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized…
–
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware…