PT-2007-5886 · Aztech · Aztech Dsl600Eu

Acheddamiman · Publicado 2007-09-06 · Atualizado 2018-10-15 · CVE-2007-4733

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Aztech DSL600EU router (affected versions not specified)

Description: The issue concerns the Aztech DSL600EU router, where disabling WAN access to the web interface does not properly block inbound traffic on TCP port 80. This allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-4733

Produtos afetados

Aztech Dsl600Eu

Referências · 5

• http://osvdb.org/45877 · Nota
• http://securityfocus.com/archive/1/478314/100/0/threaded · Nota
• http://securitytracker.com/id?1018641 · Nota
• http://securityreason.com/securityalert/3093 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-4733 · Nota de Segurança