CVEvulnerability
CVE-2008-1252
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-200
Description
b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.
Affected configurations
• deutsche telekom speedport w500 dsl router
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://secunia.com/advisories/29414 secunia.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ Exploit
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28382 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41128 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/29414 secunia.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ Exploit
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28382 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41128 exchange.xforce.ibmcloud.com