CVE-2008-1252

N/A Unknown
Published: March 10, 2008 Modified: April 23, 2026
View on NVD

Description

b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory
http://secunia.com/advisories/29414
Source: cve@mitre.org
http://www.gnucitizen.org/projects/router-hacking-challenge/
Source: cve@mitre.org
Exploit
http://www.securityfocus.com/archive/1/489009/100/0/threaded
Source: cve@mitre.org
http://www.securityfocus.com/bid/28382
Source: cve@mitre.org
https://exchange.xforce.ibmcloud.com/vulnerabilities/41128
Source: cve@mitre.org
http://secunia.com/advisories/29414
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.gnucitizen.org/projects/router-hacking-challenge/
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
http://www.securityfocus.com/archive/1/489009/100/0/threaded
Source: af854a3a-2127-422b-91ae-364da2661108
http://www.securityfocus.com/bid/28382
Source: af854a3a-2127-422b-91ae-364da2661108
https://exchange.xforce.ibmcloud.com/vulnerabilities/41128
Source: af854a3a-2127-422b-91ae-364da2661108

10 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
1.0%
77th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)

CWE-200

Affected Vendors

deutsche_telekom

Related CVEs

CVE-2026-6222 5.3
CVE-2026-40003 5.1
CVE-2026-44597 3.7
CVE-2026-6278 N/A
CVE-2026-41484 5.3