CVE-2014-6436 Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary comm...
CriticalCVSS 9.8
EPSS 42.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aztech adsl dsl5018en 1t1r firmware | All versions | No fix listed |
| aztech dsl705e firmware | All versions | No fix listed |
| aztech dsl705eu firmware | All versions | No fix listed |
References
- packetstormsecurity.com exploit third-party-advisory vdb-entry
- 20140919 Re: Multiple Vulnerabilities with Aztech Modem Routers mailing-list
- 69811 third-party-advisory vdb-entry