CVE-2006-3561

BT Voyager 2091 Wireless <3.01m - Auth Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2006-3561. PoCs published by Adrian _pagvac_ Pastor.

AI-analyzed exploit summary The provided entry is a reference to a tarball containing exploits for multiple vulnerabilities in the BT Voyager 2091 Wireless ADSL router. It does not include actual exploit code but points to an external source for the binaries.

Description

BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as configuration information via (1) /btvoyager_getconfig.sh, PPP credentials via (2) btvoyager_getpppcreds.sh, and decode configuration credentials via (3) btvoyager_decoder.c.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Adrian _pagvac_ Pastor · textremotehardware
https://www.exploit-db.com/exploits/2034

The provided entry is a reference to a tarball containing exploits for multiple vulnerabilities in the BT Voyager 2091 Wireless ADSL router. It does not include actual exploit code but points to an external source for the binaries.

Classification
Writeup 90%
Attack Type
Other
Complexity
Trivial
Reliability
Theoretical
Target: BT Voyager 2091 (Wireless ADSL)
No auth needed
Prerequisites: Access to the tarball linked in the reference
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (10)

Core 10
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/489009/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/19057
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/440405/100/0/threaded
Mailing List mailing-list x_refsource_fulldisc
http://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047733.html
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2006/2734
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/27652
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/20982

Scores

EPSS 0.0660
EPSS Percentile 93.0%

Details

CWE
CWE-200 CWE-264
Status published
Products (1)
bt/voyager_2091_wireless_adsl_router < 2.21.05.08m_a2pb018c1.d16d
Published Jul 13, 2006
Tracked Since Feb 18, 2026