CVE-2008-1252

Published: Mar 10, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.

Affected (1)

Products: Deutsche Telekom: Speedport W500 Dsl Router

Deutsche Telekom

1 product

Speedport W500 Dsl Router

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Deutsche Telekom Speedport W500 Dsl Router	All versions

Related CWEs

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (10)

http://secunia.com/advisories/29414

Source: cve@mitre.org

http://www.gnucitizen.org/projects/router-hacking-challenge/

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/489009/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/28382

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/41128

Source: cve@mitre.org

http://secunia.com/advisories/29414