Unscored severity · published Oct 12, 2007
CVE-2007-5385
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 64% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
HH
Home Hub · BT
All versions, or not specified · source: NVD
S7
Speedtouch 7g Router · Alcatel
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2007-5385
CVE.org
https://www.cve.org/CVERecord?id=CVE-2007-5385
securityreason.com
http://securityreason.com/securityalert/3213
www.gnucitizen.org
http://www.gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub
www.securityfocus.com
http://www.securityfocus.com/archive/1/481835/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/25972
www.theregister.co.uk
http://www.theregister.co.uk/2007/10/09/bt_home_hub_vuln/
More from Speedtouch 7g Router
–
CVE-2007-5383
The Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allows remote attackers on an intranet to bypass authentication and gain administrative…
–
CVE-2007-5384
Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G router, as used for the BT Home Hub 6.2.6.B and earlier, allow remote attackers to…