Home  >  CVE-2001-1484
CVE Details for CVE: CVE-2001-1484
Summary
Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.
Timestamps
Last major update 11-07-2017 - 01:29
Published 31-12-2001 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:h:alcatel:speed_touch_adsl_modem:home:*:*:*:*:*:*:*
    cpe:2.3:h:alcatel:speed_touch_adsl_modem:home:*:*:*:*:*:*:*
  • cpe:2.3:h:alcatel:adsl_modem_1000:*:*:*:*:*:*:*:*
    cpe:2.3:h:alcatel:adsl_modem_1000:*:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
7.5
Impact
6.4
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
cert CA-2001-08
cert-vn VU#211736
xf alcatel-tftp-lan-access(6336)