Description
The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/21552
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/16215
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/18294
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/14372
Exploit, Vendor Advisory x_refsource_misc
http://www.securenetwork.it/advisories/
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=112230914431638&w=2
Scores
EPSS
0.0164
EPSS Percentile
82.2%
Details
Status
published
Products (1)
siemens/santis_50
4.2.8.0
Published
Aug 03, 2005
Tracked Since
Feb 18, 2026