PT-2007-6434 · Thomson/Alcatel · Thomson/Alcatel Speedtouch 7G

Adrian Pastor + 1 · Published 2007-10-12 · Updated 2018-10-15 · CVE-2007-5383

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Thomson/Alcatel SpeedTouch 7G router versions 6.2.6.B and earlier

Description: The issue allows remote attackers on an intranet to bypass authentication and gain administrative access. This can be achieved via vectors including a '/' (slash) character at the end of the PATH INFO to cgi/b. Additionally, remote attackers outside the intranet can exploit this by leveraging a separate CSRF vulnerability.

Recommendations: For versions 6.2.6.B and earlier, as a temporary workaround, consider restricting access to the cgi/b endpoint to minimize the risk of exploitation. Avoid using the '/' character at the end of the PATH INFO to prevent bypassing authentication. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2007-5383

Affected Products

Thomson/Alcatel Speedtouch 7G

References · 10

• 🔥 http://securityfocus.com/bid/25972 · Exploit
• 🔥 http://gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-5383 · Security Note
• http://gnucitizen.org/projects/router-hacking-challenge · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• http://securityreason.com/securityalert/3213 · Note
• http://theregister.co.uk/2007/10/09/bt_home_hub_vuln · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41271 · Note
• http://gnucitizen.org/blog/bt-home-flub-pwnin-the-bt-home-hub · Note
• http://securityfocus.com/archive/1/481835/100/0/threaded · Note