CVE-2015-0554 in Router
Zusammenfassung (Englisch)
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservieren
05.01.2015
Veröffentlichung
21.01.2015
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 68511 | Pirelli Router rebootinfo.cgi erweiterte Rechte | 264 | High | Workaround | CVE-2015-0554 |
| 68510 | Pirelli Router erweiterte Rechte | 264 | High | Workaround | CVE-2015-0554 |