CVEvulnerability
CVE-2015-0554
9.4 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-01-21
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.4 HIGH — AV:N/AC:L/Au:N/C:C/I:N/A:C
- Weaknesses
- CWE-264
Description
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.
Affected configurations
• adb p.dga4001n firmware pdg tef sp 4.06l.6
Related
Weakness · not in database (1)
References
- http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.DGA4001N-Information-Disclosure.html Exploit
- http://www.exploit-db.com/exploits/35721 Exploit
- http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.DGA4001N-Information-Disclosure.html Exploit
- http://www.exploit-db.com/exploits/35721 Exploit