CVE-2005-0494 Auth bypass in n/a
Remote attackers on the LAN can bypass password validation in the Thomson TCW690 cable modem's HTTP server to gain unauthorized access.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-0494?
CVE-2005-0494 is a high-severity authentication bypass vulnerability in n/a, published on 21 Feb 2005. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The RgSecurity form in the HTTP server for the Thomson TCW690 cable modem running firmware 2.1 and software ST42.03.0a does not properly validate the password before performing changes, which allows remote attackers on the LAN to gain access via a direct POST request.
Which versions are affected by CVE-2005-0494?
It affects 1 product.
Products include Thomson Thomson Cable Modem.
How do I fix CVE-2005-0494?
No fix has been published for CVE-2005-0494 yet. Limit exposure of the affected software until one is available.
Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.
Is CVE-2005-0494 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-0494 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-2w9q-2gq5-vqqj.