Every CVE Search/ Get API key

CVE-2001-1484

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to...

7.5 High

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.

Exploit likelihood

2.36%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 7.5

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.

Record
CVE-2001-1484
CVSS 2.0
7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated
2026-11-02
CVE List No score

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.

Record
CVE-2001-1484
Updated
2026-11-02
EUVDEUVD-2001-1464 No score

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.

Record
EUVD-2001-1464
Updated
2026-11-03
GitHub AdvisoriesGHSA-v63c-22gx-p9cv No score

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to...

Alcatel ADSL modems allow remote attackers to access the Trivial File Transfer Protocol (TFTP) to modify firmware and configuration via a bounce attack from a system on the local area network (LAN) side, which is allowed to access TFTP without authentication.

Record
GHSA-v63c-22gx-p9cv
Updated
2026-11-02

Affected products

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2001-1484 is a high vulnerability (CVSS 7.5) in Alcatel Adsl Modem 1000, published December 31, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.36%, the 83rd percentile. No source names a fixed version.

References

MoveEnter Open