What’s Vulnerable › Vulnerabilities

CVE-2014-6436

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 42.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-12 · updated 2026-06-17
• Weakness: CWE-287

Description

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.

Affected products

• Aztech Adsl Dsl5018En (1T1R) Firmware: all versions
• Aztech Dsl705E Firmware: all versions
• Aztech Dsl705Eu Firmware: all versions

References

• http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
• http://www.securityfocus.com/archive/1/533489/100/0/threaded
• http://www.securityfocus.com/bid/69811
• http://packetstormsecurity.com/files/128254/Aztech-DSL5018EN-DSL705E-DSL705EU-DoS-Broken-Session-Management.html
• http://www.securityfocus.com/archive/1/533489/100/0/threaded
• http://www.securityfocus.com/bid/69811

Get alerted when CVE-2014-6436 or the next vulnerability affects your stack