CVE-2005-2424

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

The management interface for Siemens SANTIS 50 running firmware 4.2.8.0, and possibly other products including Ericsson HN294dp and Dynalink RTA300W, allows remote attackers to access the Telnet port without authentication via certain packets to the web interface that cause the interface to freeze.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

No affected versions have been published.

Timeline

Published
Aug 3, 2005
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2005

CVE-2005-242510.0Stack-based buffer overflow in Ares FileShare 1.1 allows remote attackers or local users to execute arbitrary code via a (1) long history paCVE-2005-24262.1FTPshell Server 3.38 allows remote authenticated users to cause a denial of service (application crash) by multiple connections and disconneCVE-2005-24274.3Cross-site scripting (XSS) vulnerability in viewCart.asp in CartWIZ allows remote attackers to inject arbitrary web script or HTML via the mCVE-2005-24285.0Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, whiCVE-2005-24295.0Firefox, when opening Microsoft Word documents, does not properly set the permissions on shared sections, which allows remote attackers to wCVE-2005-24304.3Multiple cross-site scripting (XSS) vulnerabilities in GForge 4.5 allow remote attackers to inject arbitrary web script or HTML via the (1) CVE-2005-24315.0The (1) lost password and (2) account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail CVE-2005-24327.5SQL injection vulnerability in PhpList allows remote attackers to modify SQL statements via the id argument to admin pages such as (1) membeCVE-2005-24335.0PhpList allows remote attackers to obtain sensitive information via a direct request to (1) about.php, (2) connect.php, (3) domainstats.php CVE-2005-24345.0Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection CVE-2005-24354.3Cross-site scripting (XSS) vulnerability in browse.php in Website Baker Project allows remote attackers to inject arbitrary web script or HTCVE-2005-24365.0browse.php in Website Baker Project allows remote attackers to obtain sensitive data via (1) a directory that does not exist in the dir para
CVE-2005-2424: High severity, CVSS 7.5 | Vulnix