Sign-up

ID

VAR-200509-0184


CVE

CVE-2005-2862


TITLE

Annex Modem blank password vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200509-071

DESCRIPTION

ADSL Road Runner modem in the Annex A family has a service running on port 224, which allows remote attackers to login to the modem with a blank password and gain unauthorized access. Annex is a modem specification

Trust: 1.26

sources: NVD: CVE-2005-2862 // BID: 89335 // VULHUB: VHN-14071

AFFECTED PRODUCTS

vendor:road runnermodel:adsl road runner modemscope:eqversion:annex_a

Trust: 1.6

vendor:roadmodel:runner adsl road runner modem annex ascope: - version: -

Trust: 0.3

sources: BID: 89335 // NVD: CVE-2005-2862 // CNNVD: CNNVD-200509-071

CVSS

SEVERITY

CVSSV2

CVSSV3

NVD: CVE-2005-2862
value: HIGH

Trust: 1.0

CNNVD: CNNVD-200509-071
value: HIGH

Trust: 0.6

VULHUB: VHN-14071
value: HIGH

Trust: 0.1

NVD:
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: FALSE
obtainAllPrivilege: FALSE
obtainUserPrivilege: FALSE
obtainOtherPrivilege: TRUE
userInteractionRequired: FALSE
version: 2.0

Trust: 1.0

VULHUB: VHN-14071
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-14071 // NVD: CVE-2005-2862 // CNNVD: CNNVD-200509-071

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2005-2862

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200509-071

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200509-071

CONFIGURATIONS

sources:
            
            
            NVD: CVE-2005-2862

EXTERNAL IDS
db:NVDid:CVE-2005-2862
Trust: 2.0
db:CNNVDid:CNNVD-200509-071
Trust: 0.7
db:BUGTRAQid:20050902 (ANNEX A) ADSL ROAD RUNNER EXPLOIT DESCRIPTION & THEORY
Trust: 0.6
db:BIDid:89335
Trust: 0.4
db:VULHUBid:VHN-14071
Trust: 0.1
sources:
            
            
            VULHUB: VHN-14071 // 
            
            
            
            BID: 89335 // 
            
            
            
            NVD: CVE-2005-2862 // 
            
            
            
            CNNVD: CNNVD-200509-071

REFERENCES
url:http://marc.info/?l=bugtraq&m=112607274800750&w=2
Trust: 1.0
url:http://marc.theaimsgroup.com/?l=bugtraq&m=112607274800750&w=2
Trust: 0.9
url:http://marc.info/?l=bugtraq&m=112607274800750&w=2
Trust: 0.1
sources:
            
            
            VULHUB: VHN-14071 // 
            
            
            
            BID: 89335 // 
            
            
            
            NVD: CVE-2005-2862 // 
            
            
            
            CNNVD: CNNVD-200509-071

CREDITS
Unknown
Trust: 0.3
sources:
            
            
            BID: 89335

SOURCES
db:VULHUBid:VHN-14071
db:BIDid:89335
db:NVDid:CVE-2005-2862
db:CNNVDid:CNNVD-200509-071

LAST UPDATE DATE
2023-12-18T12:53:37.077000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-14071date:2016-10-18T00:00:00
db:BIDid:89335date:2005-09-08T00:00:00
db:NVDid:CVE-2005-2862date:2016-10-18T03:30:55.353
db:CNNVDid:CNNVD-200509-071date:2005-10-20T00:00:00

SOURCES RELEASE DATE
db:VULHUBid:VHN-14071date:2005-09-08T00:00:00
db:BIDid:89335date:2005-09-08T00:00:00
db:NVDid:CVE-2005-2862date:2005-09-08T23:03:00
db:CNNVDid:CNNVD-200509-071date:2005-09-08T00:00:00