CVE-2004-0641

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-08-05 · updated 2026-06-16

Description

Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.

Affected products

Thomson Speedtouch: 510_adsl_router

References

http://secunia.com/advisories/12238/
http://www.auscert.org.au/render.html?it=4299
http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true
http://www.securityfocus.com/bid/10881
https://exchange.xforce.ibmcloud.com/vulnerabilities/16919
http://secunia.com/advisories/12238/
http://www.auscert.org.au/render.html?it=4299
http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=true
http://www.securityfocus.com/bid/10881
https://exchange.xforce.ibmcloud.com/vulnerabilities/16919

Get alerted when CVE-2004-0641 or the next vulnerability affects your stack