VulnerabilityModified
CVE-2004-0641
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
HIGH 7.5EPSS 2.61%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (2.61%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Thomson SpeedTouch 510 ADSL Router with firmware GV8BAA3.270, and possibly earlier versions, generates predictable TCP Initial Sequence Numbers (ISNs), which allows remote attackers to spoof or hijack TCP connections.
- CVSS 2.0
- 7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
- EPSS
- 2.61% probability · 85th percentile
- CISA KEV
- Not listed
- Affected
- thomson/speedtouch
- Source
- cve@mitre.org
References
- http://secunia.com/advisories/12238/Vendor Advisory
- http://www.auscert.org.au/render.html?it=4299Vendor Advisory
- http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=trueVendor Advisory
- http://www.securityfocus.com/bid/10881Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16919
- http://secunia.com/advisories/12238/Vendor Advisory
- http://www.auscert.org.au/render.html?it=4299Vendor Advisory
- http://www.idefense.com/application/poi/display?id=120&type=vulnerabilities&flashstatus=trueVendor Advisory
- http://www.securityfocus.com/bid/10881Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16919
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.