Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Account Vulnerability

Bugtraq ID:	10669
Class:	Design Error
CVE:	CVE-2004-0680
Remote:	Yes
Local:	No
Published:	Jul 06 2004 12:00AM
Updated:	Jul 12 2009 06:16AM
Credit:	Discovery is credited to Adam Laurie <[email protected]>.
Vulnerable:	Zoom Model 5560 X3 ETHERNET ADSL Modem
Not Vulnerable:

Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Account Vulnerability

The Zoom Model 5560 X3 ETHERNET ADSL Modem is reported to contain a default backdoor account.

A remote attacker can gain unauthorized access to the vulnerable appliance and then carry out other attacks against the users of the network.

Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Account Vulnerability

No exploit is required.

Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Account Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Zoom Model 5560 X3 ETHERNET ADSL Modem Default Backdoor Account Vulnerability

References:

• Homepage (Zoom)
  
• backdoor menu on conexant chipset dsl router (Zoom X3) (Adam Laurie )