high7.5Public exploit code
CVE-2005-0494
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Thomson TCW690 - POST Password Validation2005-02-19 · remote · hardware · Verified
Impact
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Thomson | Thomson Cable Modem | Version tcw690 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=110886937131507&w=2
- http://secunia.com/advisories/14353
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19387
- http://marc.info/?l=bugtraq&m=110886937131507&w=2
- http://secunia.com/advisories/14353
- https://exchange.xforce.ibmcloud.com/vulnerabilities/19387