CVE-2007-0435 T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value.
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
T-Com Speedport 500V routers with firmware 1.31 allow remote attackers to bypass authentication and reconfigure the device via a LOGINKEY=TECOM cookie value.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| t-com speedport 500v | All versions | No fix listed |
| t-com speedport 500v firmware | = 1.31 | No fix listed |
References
- 32995 vdb-entry
- 23853 third-party-advisory vendor-advisory
- 20070119 Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass mailing-list
- 20070121 Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass mailing-list
- 20070122 Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass mailing-list
- 20070216 Re: Virginity Security Advisory 2007-001 : T-Com Speedport 500V Login bypass mailing-list
- 22160 vdb-entry
- tcom-login-authentication-bypass(31621) vdb-entry