CVE-2008-3411 - CVE House
Back to Database
Status published Critical CVE-2008-3411

The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not...

Vulnerability Description

The Axesstel AXW-D800 modem with D2_ETH_109_01_VEBR Jun-14-2006 software does not require authentication for (1) etc/config/System.html, (2) etc/config/Network.html, (3) etc/config/Security.html, (4) cgi-bin/sysconf.cgi, and (5) cgi-bin/route.cgi, which allows remote attackers to change the modem's configuration via direct requests.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-3411

Credits & Attribution

No credits recorded in the NVD database.

References

More from axesstel

View All →
CVE-2017-13724
On the Axesstel MU553S MU55XS-V1.14, there is a Stored Cross...
Medium 5.4
CVE-2017-11351
Axesstel MU553S MU55XS-V1.14 devices have a default password of admin...
Critical 9.8
CVE-2017-11350
Cross-Site Request Forgery (CSRF) exists in cgi-bin/ConfigSet on Axesstel MU553S...
High 8.8
CVE-2009-2323
The web interface on the Axesstel MV 410R redirects users...
Medium 5.8
CVE-2009-2322
Cross-site scripting (XSS) vulnerability in cgi-bin/sysconf.cgi on the Axesstel MV...
Medium 4.3

Affected Vendor

Affected Software

akw-d800
Vulnerable Versions:
d2_eth_109_01_vebr

Timeline

Official Publish: July 31st, 2008
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.