CVE-2006-0947 - CVE House
Back to Database
Status published High CVE-2006-0947

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to...

Vulnerability Description

Thomson SpeedTouch modem running firmware 5.3.2.6.0 allows remote attackers to create users that cannot be deleted via scripting code in the "31" parameter in a NewUser function, which is not filtered by the modem when creating the account, but cannot be deleted by the administrator, possibly due to cleansing that occurs in the administrator interface.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-0947

Credits & Attribution

No credits recorded in the NVD database.

References

More from thomson

View All →
CVE-2014-4716
Cross-site request forgery (CSRF) vulnerability in Thomson TWG87OUIR allows remote...
Medium 6.8
CVE-2007-6003
Cross-site scripting (XSS) vulnerability in cgi/b/ic/connect in the Thomson SpeedTouch...
Medium 4.3
CVE-2007-4753
The Thomson ST 2030 SIP phone with software 1.52.1 allows...
Medium 5
CVE-2007-4553
The Thomson ST 2030 SIP phone with software 1.52.1 allows...
Medium 5
CVE-2006-0946
Cross-site scripting (XSS) vulnerability in Thomson SpeedTouch modems running firmware...
Medium 4.3

Affected Vendor

Affected Software

speedtouch
Vulnerable Versions:
516_5.3.2.6.0, 530_5.3.2.6.0, 536_5.3.2.6.0, 546_5.3.2.6.0, 576_5.3.2.6.0, 580_5.3.2.6.0, 585_5.3.2.6.0

Timeline

Official Publish: March 1st, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.