CVE-2014-6436: Aztech Adsl DSL5018EN (1t1r) Firmware

Critical severity, CVSS 9.8. EPSS: 42.1% chance of exploitation in the next 30 days.

Aztech ADSL DSL5018EN (1T1R), DSL705E, and DSL705EU devices improperly manage sessions, which allows remote attackers to bypass authentication in opportunistic circumstances and execute arbitrary commands with administrator privileges by leveraging an existing web portal login.

Affected products

• Aztech Adsl DSL5018EN (1t1r) Firmware: affected versions not specified
• Aztech DSL705E Firmware: affected versions not specified
• Aztech DSL705EU Firmware: affected versions not specified

Published 2018-01-12. Last modified 2026-06-17.