CVE-2008-1252 b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.
HighCVSS 10.0
EPSS 2.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| deutsche telekom speedport w500 dsl router | All versions | No fix listed |
References
- 29414 third-party-advisory
- www.gnucitizen.org exploit
- 20080301 The Router Hacking Challenge is Over! mailing-list
- 28382 vdb-entry
- speedport-w500-bbanner-info-disclosure(41128) vdb-entry