What is the severity of CVE-2001-1425?

CVE-2001-1425 is considered a high-severity vulnerability due to the potential for remote attackers to gain elevated privileges.

How do I fix CVE-2001-1425?

To mitigate CVE-2001-1425, upgrade the Alcatel Speed Touch firmware to a version that is not vulnerable, specifically beyond khdsaa.134.

What devices are affected by CVE-2001-1425?

CVE-2001-1425 affects Alcatel Speed Touch Home devices running firmware versions khdsaa.108, khdsaa.132, khdsaa.133, and khdsaa.134.

Can CVE-2001-1425 be exploited remotely?

Yes, CVE-2001-1425 can be exploited remotely by attackers using the challenge-response authentication mechanism.

What kind of attack is facilitated by CVE-2001-1425?

CVE-2001-1425 allows attackers to compute the challenge-response, enabling them to gain unauthorized access to the device.

Vulnerability/
CVE-2001-1425

high

7.5

CWE

NVD-CWE-Other

10/4/2001

22/3/2005

8/8/2024

CVE-2001-1425

First published: Tue Apr 10 2001(Updated: )

The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Alcatel Speed Touch Home	=khdsaa.133
Alcatel Speed Touch Home	=khdsaa.134
Alcatel Speed Touch Home	=khdsaa.132
Alcatel Speed Touch Home	=khdsaa.108

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2001-1425?
CVE-2001-1425 is considered a high-severity vulnerability due to the potential for remote attackers to gain elevated privileges.
How do I fix CVE-2001-1425?
To mitigate CVE-2001-1425, upgrade the Alcatel Speed Touch firmware to a version that is not vulnerable, specifically beyond khdsaa.134.
What devices are affected by CVE-2001-1425?
CVE-2001-1425 affects Alcatel Speed Touch Home devices running firmware versions khdsaa.108, khdsaa.132, khdsaa.133, and khdsaa.134.
Can CVE-2001-1425 be exploited remotely?
Yes, CVE-2001-1425 can be exploited remotely by attackers using the challenge-response authentication mechanism.
What kind of attack is facilitated by CVE-2001-1425?
CVE-2001-1425 allows attackers to compute the challenge-response, enabling them to gain unauthorized access to the device.

collector/nvd-historical
vendor/alcatel
product/speed touch home
canonical/alcatel speed touch home
collector/nvd-index
agent/references
agent/type
agent/first-publish-date
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/weakness
agent/author
agent/last-modified-date
agent/tags
agent/description
agent/event
agent/source
version/alcatel speed touch home/khdsaa.133
version/alcatel speed touch home/khdsaa.134
version/alcatel speed touch home/khdsaa.132
version/alcatel speed touch home/khdsaa.108

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.