Back to Database
Status published
High
CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed...
Vulnerability Description
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2001-1425
Credits & Attribution
No credits recorded in the NVD database.
References
More from alcatel
View All →CVE-2018-6597
The Alcatel A30 device with a build fingerprint of TCL/5046G/MICKEY6US:7.0/NRD90M/J63:user/release-keys...
Medium
6.8
CVE-2011-4505
The UPnP IGD implementation on SpeedTouch 5x6 devices with firmware...
High
7.5
CVE-2008-4383
Stack-based buffer overflow in the Agranet-Emweb embedded management web server...
Critical
10
CVE-2007-5385
Multiple cross-site scripting (XSS) vulnerabilities in the Thomson/Alcatel SpeedTouch 7G...
Medium
4.3
CVE-2007-5384
Multiple cross-site request forgery (CSRF) vulnerabilities in the Thomson/Alcatel SpeedTouch...
Medium
4.3
Affected Vendor
alcatel
View all reports →Affected Software
speed touch home
Vulnerable Versions:
khdsaa.108, khdsaa.132, khdsaa.133, khdsaa.134
Timeline
Official Publish:
March 22nd, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.