Description
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations.
References
- 2566 vdb-entry
- VU#490344 third-party-advisory
- 20010410 multiple vulnerabilities in Alcatel Speed Touch DSL modems mailing-list
- alcatel-tftp-lan-access(6336) vdb-entry
- CA-2001-08 third-party-advisory