How severe is CVE-2001-1425?

CVE-2001-1425 has a CVSS 2.0 base score of 7.5, rated high severity.

Is CVE-2001-1425 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2001-1425?

CVE-2001-1425 primarily affects Alcatel Speed Touch Home. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2001-1425?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.

When was CVE-2001-1425 published?

CVE-2001-1425 was published on 2001-04-10 and last updated on 2026-06-16.

CVE-2001-1425

CVE-2001-1425 is a high-severity vulnerability in Alcatel Speed Touch Home with a CVSS 2.0 base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: High (CVSS 2.0 base score 7.5)
EPSS exploit prediction: 4% (89th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Alcatel Speed Touch Home
Published: 2001-04-10
Last modified: 2026-06-16

Description

The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.

Frequently asked questions

What is CVE-2001-1425?: The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
How severe is CVE-2001-1425?: CVE-2001-1425 has a CVSS 2.0 base score of 7.5, rated high severity.
Is CVE-2001-1425 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (89th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2001-1425?: CVE-2001-1425 primarily affects Alcatel Speed Touch Home. In total, 4 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2001-1425?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
When was CVE-2001-1425 published?: CVE-2001-1425 was published on 2001-04-10 and last updated on 2026-06-16.

References

Affected products (4)

cpe:2.3:h:alcatel:speed_touch_home:khdsaa.108:*:*:*:*:*:*:*
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.132:*:*:*:*:*:*:*
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.133:*:*:*:*:*:*:*
cpe:2.3:h:alcatel:speed_touch_home:khdsaa.134:*:*:*:*:*:*:*

More vulnerabilities in Alcatel Speed Touch Home

CVE-2001-1424 — High (CVSS 7.5): Alcatel Speed Touch ADSL modem running firmware KHDSAA.108, KHDSAA.132, KHDSBA.133, and KHDSAA.134 has a blank default…
CVE-2001-1426 — High (CVSS 7.5): Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 has a TFTP server running without a…
CVE-2002-0119 — Medium (CVSS 5.0): Alcatel Speed Touch Home ADSL Modem allows remote attackers to cause a denial of service (reboot) via a network scan…

All CVEs affecting Alcatel Speed Touch Home →