Auth bypass in Ericsson Hm220dp Adsl Modem
CVE-2003-1442
The web administration page for the Ericsson HM220dp ADSL modem does not require authentication, which could allow remote attackers to gain access from the LAN side.
Vulnerability class: Broken Authentication
EPSS: 0.026 (84.0th percentile) — read the EPSS interpretation.
Affected products
- Ericsson Hm220dp_adsl_modem
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)