CVE-2007-2649 Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attac...
HighCVSS 7.8
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| t-com speedport w 700v | All versions | No fix listed |
References
- 36011 vdb-entry
- 25266 third-party-advisory vendor-advisory
- 2705 third-party-advisory
- www.devtarget.org vendor-advisory
- 20070511 Design Flaw in Deutsche Telekom Speedport w700v broadband router mailing-list
- 23967 vdb-entry
- speedport-login-brute-force(34334) vdb-entry