CVE-2001-1424
CVE-2001-1424 is a high-severity vulnerability in Alcatel Speed Touch Home with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 2.0 base score 7.5)
- EPSS exploit prediction: 4% (88th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Alcatel Speed Touch Home
- Published:
- Last modified:
Description
Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access.
Frequently asked questions
- What is CVE-2001-1424?
- Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default password, which allows remote attackers to gain unauthorized access.
- How severe is CVE-2001-1424?
- CVE-2001-1424 has a CVSS 2.0 base score of 7.5, rated high severity.
- Is CVE-2001-1424 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (88th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2001-1424?
- CVE-2001-1424 primarily affects Alcatel Speed Touch Home. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2001-1424?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2001-1424 published?
- CVE-2001-1424 was published on 2001-04-10 and last updated on 2026-06-16.
References
- http://security.sdsc.edu/self-help/alcatel/alcatel-bugs.html
- http://www.cert.org/advisories/CA-2001-08.html
- http://www.kb.cert.org/vuls/id/212088
- http://www.securityfocus.com/archive/1/175229
- http://www.securityfocus.com/bid/2568
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6335
Affected products (4)
- cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108:*:*:*:*:*:*:*
- cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132:*:*:*:*:*:*:*
- cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133:*:*:*:*:*:*:*
- cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134:*:*:*:*:*:*:*
More vulnerabilities in Alcatel Speed Touch Home
- CVE-2001-1425 — High (CVSS 7.5): The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and…
- CVE-2001-1426 — High (CVSS 7.5): Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a…
- CVE-2002-0119 — Medium (CVSS 5.0): Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan…