Unscored severity · published Dec 31, 2003
CVE-2003-1442
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side
–
CVSS
2.6%
EPSS
No
On KEV
Description
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HA
Hm220dp Adsl Modem · Ericsson
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2003-1442
CVE.org
https://www.cve.org/CVERecord?id=CVE-2003-1442
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html
marc.info
http://marc.info/?l=bugtraq&m=104619331706574&w=2
Exploit
http://www.securityfocus.com/bid/6824
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/11290