CVE-2001-1426: High severity alcatel speed touch home vulnerability
Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a password, which allows remote attackers to change firmware versions or the device's configurations.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2001-1426?
CVE-2001-1426 is classified as a high severity vulnerability due to the potential for remote attackers to modify device configurations.
How do I fix CVE-2001-1426?
To mitigate CVE-2001-1426, disable the TFTP service on the affected Alcatel Speed Touch models or implement proper access controls.
Which versions of Alcatel Speed Touch are affected by CVE-2001-1426?
CVE-2001-1426 affects Alcatel Speed Touch devices running firmware versions KHDSAA.108, KHDSAA.132, KHDSAA.133, and KHDSAA.134.
Can CVE-2001-1426 be exploited remotely?
Yes, CVE-2001-1426 can be exploited remotely by attackers due to the lack of password protection on the TFTP server.
What are the potential impacts of CVE-2001-1426?
The potential impacts of CVE-2001-1426 include unauthorized firmware changes and configuration alterations, compromising network security.