CVE-2001-1425

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.7% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2001-04-10 · updated 2026-06-16

Description

The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.

Affected products

Alcatel Speed Touch Home: khdsaa.108, khdsaa.132, khdsaa.133, khdsaa.134

References

http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html
http://www.cert.org/advisories/CA-2001-08.html
http://www.kb.cert.org/vuls/id/243592
http://www.securityfocus.com/archive/1/175229
http://www.securityfocus.com/bid/2568
https://exchange.xforce.ibmcloud.com/vulnerabilities/6354
http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html
http://www.cert.org/advisories/CA-2001-08.html
http://www.kb.cert.org/vuls/id/243592
http://www.securityfocus.com/archive/1/175229
http://www.securityfocus.com/bid/2568
https://exchange.xforce.ibmcloud.com/vulnerabilities/6354

Get alerted when CVE-2001-1425 or the next vulnerability affects your stack