CVE-2006-0947

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-03-01 · updated 2026-06-16

Description

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due to cleansing that occurs in the administrator interface.

Affected products

Thomson Speedtouch: 516_5.3.2.6.0, 530_5.3.2.6.0, 536_5.3.2.6.0, 546_5.3.2.6.0, 576_5.3.2.6.0, 580_5.3.2.6.0 (+1)

References

http://secunia.com/advisories/19069
http://securitytracker.com/id?1015688
http://www.securityfocus.com/archive/1/426186
http://www.securityfocus.com/bid/16839
http://www.vupen.com/english/advisories/2006/0765
http://secunia.com/advisories/19069
http://securitytracker.com/id?1015688
http://www.securityfocus.com/archive/1/426186
http://www.securityfocus.com/bid/16839
http://www.vupen.com/english/advisories/2006/0765

Get alerted when CVE-2006-0947 or the next vulnerability affects your stack