Alcatel Speedtouch 5x6 Router up to 6.2.28 config

Summaryinfo

A vulnerability categorized as critical has been discovered in Alcatel Speedtouch 5x6 Router up to 6.2.28. This vulnerability affects unknown code. Such manipulation leads to config. This vulnerability is referenced as CVE-2011-4505. No exploit is available. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability was found in Alcatel Speedtouch 5x6 Router up to 6.2.28 (Router Operating System). It has been rated as critical. Affected by this issue is an unknown functionality. The manipulation with an unknown input leads to a config vulnerability. Using CWE to declare the problem leads to CWE-16. Impacted is confidentiality, integrity, and availability. CVE summarizes:

The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware before 6.2.29 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

The weakness was published 11/22/2011 as confirmed advisory (CERT.org). The advisory is shared for download at kb.cert.org. This vulnerability is handled as CVE-2011-4505 since 11/22/2011. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The MITRE ATT&CK project declares the attack technique as T1592.004.

Upgrading to version 6.2.29 eliminates this vulnerability.

Similar entries are available at VDB-59481, VDB-59479, VDB-59478 and VDB-59477. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Router Operating System

Vendor

• Alcatel

Name

• Speedtouch 5x6 Router

Version

• 6.2.0
• 6.2.1
• 6.2.2
• 6.2.3
• 6.2.4
• 6.2.5
• 6.2.6
• 6.2.7
• 6.2.8
• 6.2.9
• 6.2.10
• 6.2.11
• 6.2.12
• 6.2.13
• 6.2.14
• 6.2.15
• 6.2.16
• 6.2.17
• 6.2.18
• 6.2.19
• 6.2.20
• 6.2.21
• 6.2.22
• 6.2.23
• 6.2.24
• 6.2.25
• 6.2.26
• 6.2.27
• 6.2.28

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion