CVE-2015-0554
Quick assessment
Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
ADB（前称Pirelli Broadband Solutions）P.DGA4001N是瑞士ADB公司的一款ADSL无线路由器产品。 使用PDG_TEF_SP_4.06L.6版本固件的ADB P.DGA4001N路由器存在安全漏洞，该漏洞源于程序没有正确限制对Web界面的访问。远程攻击者可通过向wlsecurity.html页面或resetrouter.html页面发送请求利用该漏洞获取敏感信息或造成拒绝服务（设备重启）。
Possible ATT&CK Techniques 3 AI
T1029 · Scheduled Transfer T1069 · Permission Groups Discovery T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2015-0554
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
The ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
ADB P.DGA4001N路由器安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
ADB（前称Pirelli Broadband Solutions）P.DGA4001N是瑞士ADB公司的一款ADSL无线路由器产品。 使用PDG_TEF_SP_4.06L.6版本固件的ADB P.DGA4001N路由器存在安全漏洞，该漏洞源于程序没有正确限制对Web界面的访问。远程攻击者可通过向wlsecurity.html页面或resetrouter.html页面发送请求利用该漏洞获取敏感信息或造成拒绝服务（设备重启）。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2015-0554
| # | POC Description | Source Link | Shenlong Link |
|---|---|---|---|
| 1 | ADB (formerly Pirelli Broadband Solutions) P.DGA4001N router with firmware PDG_TEF_SP_4.06L.6 does not properly restrict access to the web interface, which allows remote attackers to obtain sensitive information or cause a denial of service (device restart) as demonstrated by a direct request to (1) wlsecurity.html or (2) resetrouter.html. | https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2015/CVE-2015-0554.yaml | POC Details |
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2015-0554
请登录查看更多情报信息。
Exploits & Public PoCs for CVE-2015-0554 (2)
Same Patch Batch · n/a · 2015-01-21 · 164 CVEs total
| CVE-2014-6580 | Oracle Fusion Middleware Reports Developer组件安全漏洞 | |
| CVE-2014-6570 | Oracle Sun Systems Products Suite Solaris组件拒绝服务漏洞 | |
| CVE-2014-6571 | Oracle Fusion Middleware HTTP Server组件安全漏洞 | |
| CVE-2014-6572 | Oracle E-Business Suite Customer Interaction History组件安全漏洞 | |
| CVE-2014-6573 | Oracle Enterprise Manager Grid Control Enterprise Manager Ops Center组件安全漏洞 | |
| CVE-2014-6574 | Oracle Supply Chain Products Suite Agile PLM for Process组件安全漏洞 | |
| CVE-2014-6575 | Oracle Sun Systems Products Suite Solaris组件拒绝服务漏洞 | |
| CVE-2014-6576 | Oracle Fusion Middleware Adaptive Access Manager组件安全漏洞 | |
| CVE-2014-6577 | Oracle Database Server XML Developer's Kit for C组件安全漏洞 | |
| CVE-2014-6578 | Oracle Database Server Workspace Manager组件任意代码执行漏洞 | |
| CVE-2014-6579 | Oracle PeopleSoft Products PeopleSoft Enterprise PeopleTools组件安全漏洞 | |
| CVE-2014-6585 | Oracle Java SE 安全漏洞 | |
| CVE-2014-6589 | Oracle Virtualization VM VirtualBox组件安全漏洞 | |
| CVE-2014-6588 | Oracle Virtualization VM VirtualBox组件安全漏洞 | |
| CVE-2014-6587 | Oracle Java SE 安全漏洞 | |
| CVE-2014-6586 | Oracle PeopleSoft Products PeopleSoft Enterprise HRMS组件安全漏洞 | |
| CVE-2014-6583 | Oracle E-Business Suite Marketing组件安全漏洞 | |
| CVE-2014-6581 | Oracle E-Business Suite Customer Intelligence组件安全漏洞 | |
| CVE-2014-6582 | Oracle E-Business Suite HCM Configuration Workbench组件安全漏洞 | |
| CVE-2014-6569 | Oracle Fusion Middleware WebLogic Server组件安全漏洞 |
Showing top 20 of 164 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2015-0554
No comments yet