PT-2004-1767 · Zoom · Zoom X3 Adsl Modem

Adam Laurie · Published 2004-07-13 · Updated 2017-07-11 · CVE-2004-0680

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Zoom X3 ADSL modem (affected versions not specified)

Description The issue concerns a terminal running on port 254 of the Zoom X3 ADSL modem, which can be accessed using the default HTML management password. This access is possible even if the password for the HTTP interface has been changed, potentially allowing remote attackers to gain unauthorized access.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2004-0680

Affected Products

Zoom X3 Adsl Modem

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-0680 · Security Note
• http://securityfocus.com/bid/10669 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16639 · Note
• http://marc.info/?l=bugtraq&m=108915255520924&w=2 · Note