high7.5Public exploit code
CVE-2014-6435
cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Aztech Routers - '/cgi-bin/AZ_Retrain.cgi' Denial of Service2014-09-15 · dos · hardware · Verified
Impact
cgi-bin/AZ_Retrain.cgi in Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices does not check for authentication, which allows remote attackers to cause a denial of service (WAN connectivity reset) via a direct request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aztech | Adsl Dsl5018en \(1t1r\) Firmware | All versions |
| Aztech | Dsl705e Firmware | All versions |
| Aztech | Dsl705eu Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
- http://www.securityfocus.com/bid/69809
- http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
- http://www.securityfocus.com/bid/69809