Unscored severity · published Apr 10, 2001
CVE-2001-1426
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware…
–
CVSS
2%
EPSS
No
On KEV
Description
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ST
Speed Touch Home · Alcatel
khdsaa.108; khdsaa.132; khdsaa.133; khdsaa.134 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1426
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1426
US Government Resource
http://www.cert.org/advisories/CA-2001-08.html
US Government Resource
http://www.kb.cert.org/vuls/id/490344
www.securityfocus.com
http://www.securityfocus.com/archive/1/175229
Patch
http://www.securityfocus.com/bid/2566
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/6336
More from Speed Touch Home
–
CVE-2002-0119
Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan with unusual packets, such as nmap with OS detection
–
CVE-2001-1424
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized…
–
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain…