high7.5Public exploit code
CVE-2003-1442
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Ericsson HM220dp DSL Modem - World Accessible Web Administration Interface2003-02-11 · remote · hardware · Verified
Impact
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ericsson | Hm220dp Adsl Modem | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html
- http://marc.info/?l=bugtraq&m=104619331706574&w=2
- http://www.securityfocus.com/bid/6824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11290
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0127.html
- http://marc.info/?l=bugtraq&m=104619331706574&w=2
- http://www.securityfocus.com/bid/6824
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11290