CVE-2025-56241
BaseFortify
Publication date: 2025-09-24
Last updated on: 2025-10-28
Assigner: MITRE
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| aztech | dsl5005en | 1.00.az_2013-05-10 |
| aztech | dsl5005en | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-284 | The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability in Aztech DSL5005EN firmware 1.00.AZ_2013-05-10 and possibly other versions allows unauthenticated attackers to change the administrator password by sending a specially crafted POST request to sysAccess.asp. This means an attacker can gain full administrative control of the router without needing to log in.
How can this vulnerability impact me? :
The vulnerability allows an attacker to take full administrative control of the affected router without authentication. This can lead to unauthorized changes in router settings, potential interception or redirection of network traffic, disruption of network services, and compromise of the security and privacy of the network and connected devices.