PT-2007-5886 · Aztech · Aztech Dsl600Eu

Acheddamiman · Published 2007-09-06 · Updated 2018-10-15 · CVE-2007-4733

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Aztech DSL600EU router (affected versions not specified)

Description: The issue concerns the Aztech DSL600EU router, where disabling WAN access to the web interface does not properly block inbound traffic on TCP port 80. This allows remote attackers to connect to the web interface by guessing a TCP sequence number, possibly involving spoofing of an ARP packet.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-4733

Affected Products

Aztech Dsl600Eu

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-4733 · Security Note
• http://osvdb.org/45877 · Note
• http://securityfocus.com/archive/1/478314/100/0/threaded · Note
• http://securitytracker.com/id?1018641 · Note
• http://securityreason.com/securityalert/3093 · Note