critical10.0Public exploit code
CVE-2008-6916
Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a trailing d…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SpeedStream 5200 - Authentication Bypass Configuration Download2008-11-07 · remote · hardware · Verified
Impact
Siemens SpeedStream 5200 with NetPort Software 1.1 allows remote attackers to bypass authentication via an invalid Host header, possibly involving a trailing dot in the hostname.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Siemens | Speedstream 5200 | All versions |
| John Doe | Netport Software | Version 1.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/49870
- http://secunia.com/advisories/32635
- http://www.securityfocus.com/bid/32203
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46508
- https://www.exploit-db.com/exploits/7055
- http://osvdb.org/49870
- http://secunia.com/advisories/32635
- http://www.securityfocus.com/bid/32203
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46508
- https://www.exploit-db.com/exploits/7055