Information disclosure in Deutsche Telekom Speedport W500 Dsl Router
CVE-2008-1252
b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.
Vulnerability class: Information Disclosure
EPSS: 0.025 (82.8th percentile) — read the EPSS interpretation.
Affected products
- Deutsche_telekom Speedport_w500_dsl_router
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)