CVE-2004-0680

critical

Description

Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML management password, even if the password has been changed for the HTTP interface, which could allow remote attackers to gain unauthorized access.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16639

http://www.securityfocus.com/bid/10669

http://marc.info/?l=bugtraq&m=108915255520924&w=2

Details

Source: Mitre, NVD

Published: 2004-08-06

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H