PT-2004-2941 · Conceptronic · Conceptronic Cadslr1 Adsl Router

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-2045

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Conceptronic CADSLR1 ADSL router version 3.04n

Description The issue concerns the HTTP administration interface, where remote attackers can cause a denial of service, resulting in a device reboot. This can be achieved by sending an HTTP request with a long username.

Recommendations For Conceptronic CADSLR1 ADSL router version 3.04n, as a temporary workaround, consider restricting access to the HTTP administration interface to minimize the risk of exploitation. Avoid using long username values in the affected HTTP requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2004-2045

Affected Products

Conceptronic Cadslr1 Adsl Router

References · 7

• 🔥 http://shellsec.net/leer_advisory.php?id=5 · Exploit
• 🔥 https://exploit-db.com/exploits/363 · Exploit
• 🔥 http://securityfocus.com/bid/10769 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-2045 · Security Note
• http://secunia.com/advisories/12110 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16746 · Note
• http://marc.info/?l=bugtraq&m=109045084522857&w=2 · Note