Vulnerabilities > CVE-2008-6588 - Credentials Management vulnerability in Aztech Adsl2/2+4-Port Router

047910
CVSS 10.0 - CRITICAL
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
network
low complexity
aztech
CWE-255
critical
NVD
Published: 2009-04-03
Updated: 2017-08-17

Summary

Aztech ADSL2/2+ 4-port router has a default "isp" account with a default "isp" password, which allows remote attackers to obtain access if this default is not changed.

Vulnerable Configurations

Part Description Count
Hardware
Aztech
1

Common Weakness Enumeration (CWE)

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/128254/aztech-dossession.txt
idPACKETSTORM:128254
last seen2016-12-05
published2014-09-15
reporterFederick Joe P Fajardo
sourcehttps://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
titleAztech DSL5018EN / DSL705E / DSL705EU DoS / Broken Session Management

References