CVE-2001-1425
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware...
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
Exploit likelihood
What each source reports
NVD Score used
7.5
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
- Record
CVE-2001-1425- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
- Record
CVE-2001-1425- Updated
- 2026-11-02
EUVDEUVD-2001-1405 No score
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
- Record
EUVD-2001-1405- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-jrx8-7v63-j3rx No score
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware...
The challenge-response authentication of the EXPERT user for Alcatel Speed Touch running firmware KHDSAA.108 and KHDSAA.132 through KHDSAA.134 allows remote attackers to gain privileges by directly computing the response based on information that is provided by the device during login.
- Record
GHSA-jrx8-7v63-j3rx- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2001-1425 is a high vulnerability (CVSS 7.5) in Alcatel Speed Touch Home, published April 10, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.74%, the 89th percentile. No source names a fixed version.
References
kb.cert.org/vuls/id/243592
security.sdsc.edu/self-help/alcatel/alcatel-bugs.html
exchange.xforce.ibmcloud.com/vulnerabilities/6354
securityfocus.com/archive/1/175229
securityfocus.com/bid/2568
cert.org/advisories/CA-2001-08.html
nvd.nist.gov/vuln/detail/CVE-2001-1425
github.com/advisories/GHSA-jrx8-7v63-j3rx