10
CVE-2008-1252
- EPSS 2.47%
- Veröffentlicht 10.03.2008 17:44:00
- Zuletzt bearbeitet 16.06.2026 22:51:21
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginb_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.47% | 0.824 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
CWE-200 Exposure of Sensitive Information to an Unauthorized Actor
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
http://www.gnucitizen.org/projects/router-hacking-challenge/
http://www.securityfocus.com/archive/1/489009/100/0/threaded
http://secunia.com/advisories/29414
http://www.securityfocus.com/bid/28382
https://exchange.xforce.ibmcloud.com/vulnerabilities/41128