CVE-2015-0554

The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which…

published January 21, 2015

CVSS
—
EPSS
39%
Percentile
98.6
In the wild
Unconfirmed
What it is

⚠️ A sneaky web interface on the ADB P.DGA4001N router lets attackers access sensitive info with just a URL — it’s like leaving the backdoor to your network wide open! Imagine a restaurant where anyone can stroll into the kitchen just by asking for a menu — no one checks who they are or what they're doing. That’s what’s happening with this router’s unsecured web interface! An attacker could gather sensitive information or even cause the router to reboot, disrupting your internet access like a waiter accidentally shutting down the kitchen mid-service. This means potential downtime and loss of connectivity when you need it most!

Put simply

Imagine a restaurant where anyone can stroll into the kitchen just by asking for a menu — no one checks who they are or what they're doing. That’s what’s happening with this router’s unsecured web interface! The router's firmware PDG_TEF_SP_4.06L.6 fails to restrict access to critical web pages (wlsecurity.html and resetrouter.html), allowing unauthorized access to sensitive functions and information.

What to do

An attacker could gather sensitive information or even cause the router to reboot, disrupting your internet access like a waiter accidentally shutting down the kitchen mid-service. This means potential downtime and loss of connectivity when you need it most! Update the firmware if a newer version is available, and consider implementing firewall rules to restrict access to the router’s web interface. Regularly check for updates to ensure ongoing protection. You can tackle this with a few simple steps! Stay proactive and secure your network like the hero you are! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.38932 · 98.6th percentile
Published
2015-01-21T18:00Z
EPSS history
Timeline
  • 21 JAN 18:00Z
    The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which…
    cvelistv5