CVE-2008-1252: Deutsche Telekom Speedport w500 DSL Router

High severity, CVSS 10.0. EPSS: 2.5% chance of exploitation in the next 30 days.

b_banner.stm (aka the login page) on the Deutsche Telekom Speedport W500 DSL router allows remote attackers to obtain the logon password by reading the pwd field in the HTML source.

Affected products

• Deutsche Telekom Speedport w500 DSL Router: any version

Published 2008-03-10. Last modified 2026-06-16.