CVE-2008-3411

The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2)…

published July 31, 2008

CVSS
—
EPSS
3%
Percentile
85.0
In the wild
Unconfirmed
What it is

⚠️ An Axesstel modem with the wrong version can be a hacker's playground! No authentication required for configuration pages means attackers can just walk right in. 🔥 Think of it like leaving the front door to your house wide open, inviting anyone to come in and rearrange your furniture — a total recipe for chaos! An attacker could change crucial settings on your modem, potentially redirecting your internet traffic, disrupting your home network, or even eavesdropping on your online activities. The implications are serious and could compromise your entire network's security.

Put simply

Think of it like leaving the front door to your house wide open, inviting anyone to come in and rearrange your furniture — a total recipe for chaos! This vulnerability allows unauthenticated remote access to critical configuration files of the Axesstel AXW-D800 modem, including network and security settings, via direct HTTP requests.

What to do

An attacker could change crucial settings on your modem, potentially redirecting your internet traffic, disrupting your home network, or even eavesdropping on your online activities. The implications are serious and could compromise your entire network's security. To protect yourself, ensure your modem is updated to a secure version if available. Additionally, consider changing default settings and securing your network with a strong password. Don't let those open doors remain! You've got this! By taking these steps, you'll fortify your network in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02565 · 85.0th percentile
Published
2008-07-31T17:00Z
EPSS history
Timeline
  • 31 JUL 17:00Z
    The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2)…
    cvelistv5