Matheus Bernardes

**Name of the Vulnerable Software and Affected Versions** Cisco DDR2200 ADSL2+ Residential Gateway version V00.00.03.45.4E Cisco DDR2201v1 ADSL2+ Residential Gateway version V00.00.03.28.3 **Description** The issue concerns a lack of access control for various command files on the affected devices, including info.html, wancfg.cmd, rtroutecfg.cmd, arpview.cmd, cpuview.cmd, memoryview.cmd, statswan.cmd, statsatm.cmd, scsrvcntr.cmd, scacccntr.cmd, logview.cmd, voicesipview.cmd, usbview.cmd, wlmacflt.cmd, wlwds.cmd, wlstationlist.cmd, HPNAShow.cmd, HPNAView.cmd, qoscls.cmd, qosqueue.cmd, portmap.cmd, scmacflt.cmd, scinflt.cmd, scoutflt.cmd, certlocal.cmd, or certca.cmd. **Recommendations** For Cisco DDR2200 ADSL2+ Residential Gateway version V00.00.03.45.4E, restrict access to the mentioned command files to minimize the risk of exploitation. For Cisco DDR2201v1 ADSL2+ Residential Gateway version V00.00.03.28.3, restrict access to the mentioned command files to minimize the risk of exploitation.