Enhancement: cves/2015/CVE-2015-0554.yaml by mp

patch-1
MostInterestingBotInTheWorld 2022-06-06 12:05:36 -04:00
parent b5a9f06f1a
commit ba17f1f6d8
1 changed files with 4 additions and 2 deletions

View File

@ -4,12 +4,12 @@ info:
name: Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure name: Pirelli ADSL2/2+ Wireless Router P.DGA4001N - Information Disclosure
author: daffainfo author: daffainfo
severity: high severity: high
description: The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html. description: ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.
reference: reference:
- https://www.exploit-db.com/exploits/35721 - https://www.exploit-db.com/exploits/35721
- https://nvd.nist.gov/vuln/detail/CVE-2015-0554
- http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.DGA4001N-Information-Disclosure.html - http://packetstormsecurity.com/files/129828/Pirelli-ADSL2-2-Wireless-Router-P.DGA4001N-Information-Disclosure.html
- http://www.exploit-db.com/exploits/35721 - http://www.exploit-db.com/exploits/35721
- https://nvd.nist.gov/vuln/detail/CVE-2015-0554
classification: classification:
cve-id: CVE-2015-0554 cve-id: CVE-2015-0554
tags: cve,cve2015,pirelli,router,disclosure tags: cve,cve2015,pirelli,router,disclosure
@ -32,3 +32,5 @@ requests:
- type: status - type: status
status: status:
- 200 - 200
# Enhanced by mp on 2022/06/06