PT-2004-1733 · Thomson · Thomson Speedtouch 510

Published 2004-08-05 · Updated 2017-07-11 · CVE-2004-0641

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Thomson SpeedTouch 510 ADSL Router versions prior to GV8BAA3.270

Description The issue allows remote attackers to spoof or hijack TCP connections due to the generation of predictable TCP Initial Sequence Numbers (ISNs).

Recommendations For versions prior to GV8BAA3.270, update the firmware to a version that generates unpredictable TCP Initial Sequence Numbers to prevent TCP connection spoofing or hijacking.

Exploit

Fix

Related Identifiers

CVE-2004-0641

Affected Products

Thomson Speedtouch 510

References · 8

• 🔥 https://exploit-db.com/exploits/19522 · Exploit
• http://auscert.org.au/render.html?it=4299 · Vendor Advisory
• http://securityfocus.com/bid/10881 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0641 · Security Note
• http://idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true · Vendor Advisory
• http://secunia.com/advisories/12238 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0641 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16919 · Note