CVE-2007-2649: T-Com Speedport W 700v

High severity, CVSS 7.8. EPSS: 1.9% chance of exploitation in the next 30 days.

Deutsche Telekom (T-com) Speedport W 700v uses JavaScript delays for invalid authentication attempts to the CGI script, which allows remote attackers to bypass the delays and conduct brute-force attacks via direct calls to the authentication CGI script.

Affected products

• T-Com Speedport W 700v: any version

Published 2007-05-14. Last modified 2026-06-16.