PT-2004-1733 · Thomson · Thomson Speedtouch 510

Publicado 2004-08-05 · Atualizado 2017-07-11 · CVE-2004-0641

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Thomson SpeedTouch 510 ADSL Router versions prior to GV8BAA3.270

Description The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers (ISNs).

Recommendations For versions prior to GV8BAA3.270, update the firmware to a version that generates unpredictable TCP Initial Sequence Numbers to prevent TCP connection spoofing or hijacking.

Exploit

Correção

Identificadores relacionados

CVE-2004-0641

Produtos afetados

Thomson Speedtouch 510

Referências · 8

• 🔥 https://exploit-db.com/exploits/19522 · Exploit
• http://auscert.org.au/render.html?it=4299 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0641 · Nota
• http://securityfocus.com/bid/10881 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0641 · Nota de Segurança
• http://idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true · Aviso do Fabricante
• http://secunia.com/advisories/12238 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16919 · Nota