Description
Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script.
References
- http://www.devtarget.org/speedport700-advisory-05-2007.txt
- 23967 vdb-entry
- 25266 third-party-advisory
- speedport-login-brute-force(34334) vdb-entry
- 36011 vdb-entry
- 2705 third-party-advisory
- 20070511 Design Flaw in Deutsche Telekom Speedport w700v broadband router mailing-list