CVE-2016-10042 Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticate...

HighCVSS 7.5 EPSS 1.0%

Published: 2017-06-29 19:26 (approximate time: when CVE Radar first recorded it)
Updated: 2026-06-17 03:38
Exploit status: No public exploit known

Description

Authorization Bypass in the Web interface of Arcadyan SLT-00 Star* (aka Swisscom Internet-Box) devices before R7.7 allows unauthorized reconfiguration of the static routing table via an unauthenticated HTTP request, leading to denial of service and information disclosure.

Affected products

Product	Affected versions	Fixed in
arcadyan swisscom internet-box firmware	All versions	No fix listed

References

www.swisscom.ch vendor-advisory

CVSS v3.0

7.5 High

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: None
Integrity: High
Availability: None

All scores (2)

v3.0 7.5 · nvd@nist.gov
v2.0 5.0 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 1.04% (percentile 64.5)
CWE: CWE-284

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.