CVE-2014-6435 cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service (WAN connectivity re...
HighCVSS 7.5
EPSS 12.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service (WAN connectivity reset) via a direct request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aztech adsl dsl5018en 1t1r firmware | All versions | No fix listed |
| aztech dsl705e firmware | All versions | No fix listed |
| aztech dsl705eu firmware | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 69809 third-party-advisory vdb-entry