Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Adsl_modem_1000 | Alcatel | * | * |
| Speed_touch_adsl_modem | Alcatel | home (including) | home (including) |