CVE-2005-2424

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-08-03 · updated 2026-06-16

Description

The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.

Affected products

Siemens Santis 50: 4.2.8.0

References

http://marc.info/?l=bugtraq&m=112230914431638&w=2
http://secunia.com/advisories/16215
http://www.osvdb.org/18294
http://www.securenetwork.it/advisories/
http://www.securityfocus.com/bid/14372
https://exchange.xforce.ibmcloud.com/vulnerabilities/21552
http://marc.info/?l=bugtraq&m=112230914431638&w=2
http://secunia.com/advisories/16215
http://www.osvdb.org/18294
http://www.securenetwork.it/advisories/
http://www.securityfocus.com/bid/14372
https://exchange.xforce.ibmcloud.com/vulnerabilities/21552

Get alerted when CVE-2005-2424 or the next vulnerability affects your stack