Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 21/02/2005 Updated: 11/07/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.

Vulnerable Product	Search on Vulmon	Subscribe to Product
thomson thomson cable modem tcw690

/***************************************************************** * Thomson TCW690 POST Password Validation exploit * * Tested with hardware version 21 and software version ST42030a * Bug found by: MurDoK <murdoklnx at gmailcom> * Date: 02192005 * * sh-300$ gcc mdk_tcw690c -o tcw690 * sh-300$ /tcw690 19216801 123 ...

NVD-CWE-Other http://secunia.com/advisories/14353 http://marc.info/?l=bugtraq&m=110886937131507&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/19387 https://nvd.nist.gov https://www.exploit-db.com/exploits/829/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2005-0494

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect