Vulnerability in Thomson Speedtouch

CVE-2004-0641

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

EPSS: 0.026 (83.8th percentile) — read the EPSS interpretation.

Affected products

Thomson Speedtouch — versions 510_adsl_router
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_AUSCERT, Vendor Advisory, third-party-advisory)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
cve@mitre.org (x_refsource_IDEFENSE, Vendor Advisory, third-party-advisory)
cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)