266:
226:
31:
218:
377:
360:
140:
527:
Researchers associated with the San Diego
Supercomputer Center at the University of California, San Diego have identified multiple implementation flaws in the Alcatel Speed Touch ADSL "modem" (actually an ADSL-Ethernet router/bridge). These flaws can allow an intruder to take complete control of the
297:
A line of business DSL routers launched in 2003, with optional IPSec and SIP support activated by software keys. Fixed WAN options are ADSL over POTS (ST610), ADSL over ISDN (ST610i), SHDSL (ST610s) and VDSL (ST610v). They are available either with a 4-port 10/100 LAN switch, or with an ATMF-25 LAN
511:
SpeedTouch gateways have been criticized because the algorithm used by the manufacturer to set both the default SSID and the corresponding WEP/WPA-PSK/WPA2-PSK passwords was very easily compromised, meaning that wireless access to SpeedTouch models that still use the default password is easily
371:
Similar to the 580, but with added ADSL2+ support and better WPA encryption. Four
Ethernet ports and wireless antennae. Widely distributed by Tiscali, O2, AOL and PlusNet in the UK. O2 rebrands this as "O2 Wireless Box II", and O2's BeThere subsidiary calls it the
464:
ADSL2+ high-speed
Internet access and video service together with telephony, wireless with WEP2, 4 Ethernet ports, 2 analog phone ports for internal sip client, 1 pstn connector, NO client usb, but it has a usb host for DECT
501:
A four
Ethernet port gateway with wireless antennae, integrated 3G Femto Access Point allowing 8 simultaneous users and a built in firewall designed for multimedia services over a residential network. Allows remote
253:. The middle number in the model number "5x6" indicates the number of Ethernet ports available on the modem. Firmware version 6.2.29.2 does not support PPTP (or GRE forwarding) when the ST516 is used in router mode.
151:
A basic ADSL USB modem, without router features and capable of speeds up to 1 Mbit up and 7 Mbit down. Due to its USB connection it requires drivers to work and is currently not supported well on
646:
432:
A gateway aimed at business users with four
Ethernet ports and 802.11n wireless. Similar to the TG670, but with multi-line DECT telephony, plus a gigabit LAN port for connection to a corporate network.
493:
A four
Ethernet port gateway with wireless antennae, integrated 3G Femto Access Point allowing 8 simultaneous users and a built in firewall designed for multimedia services over a residential network.
241:
modem in the SpeedTouch line-up. As with the ST510, this modem has a built in NAT router, firewall and UPnP. Firmware versions R5.3 and up also provide functionalities such as ALG (
528:
device, including changing its configuration, uploading new firmware, and disrupting the communications between the telephone central office providing ADSL service and the device.
456:
ADSL2+ high-speed
Internet access and video service together with telephony, wireless with WEP2, 4 Ethernet ports, 2 analog phone ports for internal sip client, 1 pstn connector.
543:
installation of malicious code, such as a network sniffer to gather local LAN traffic (that is not being bridged) and making the box more easily/covertly remotely accessible.
1003:
978:
953:
1053:
878:
747:
1028:
928:
903:
701:
547:
One of the more interesting discoveries was a cryptographic challenge-response back door that completely bypasses any password that a user may have set on the device.
853:
473:
A wireless modem designed for VoIP and Home
Networking Connectivity by LAN, WAN and Wi-Fi. It includes five Ethernet ports, a USB 2.0 master and a built-in firewall.
772:
676:
650:
621:
596:
1103:
1078:
571:
1125:
722:
482:
388:
A wireless modem designed for streaming multimedia content via 802.11n wireless. It includes four
Ethernet ports and a built-in firewall.
209:. The ST510 is available with either 1 or 4 Ethernet ports. The ST530 only provides 1 Ethernet socket, but can also be connected through
355:
The TG582 was introduced in 2010 and offers four
Ethernet ports and wireless, plus TR-691 capabilities for remote access and management.
828:
481:
A wireless ADSL2+ modem designed for VoIP and Home Networking. It includes four Ethernet ports, two USB 2.0 master,
540:
disabling the device, either temporarily or permanently (requiring return of the device to the manufacturer); and
1149:
516:
180:
extension card ADSL modem. This modem is more or less obsolete and has never been distributed in large numbers.
1199:
523:
reported their testing of Alcatel SpeedTouch devices that identified multiple security issues. They said:
311:
A device that adds wireless transmission capabilities to an existing modem though an Ethernet connection.
132:
17:
1182:
799:
416:
A four Ethernet port gateway with wireless antennae and a built in firewall designed for business use.
242:
1153:
520:
440:
Four port ADSL2+ gateway with high-speed Internet access and video service together with telephony.
324:
1209:
1204:
128:
1157:
344:
202:
56:
Under the SpeedTouch name Alcatel and Technicolor retail a variety of equipment including
8:
83:
interconnect equipment. They are a major brand in home and business networking products.
68:
1148:
112:
265:
396:
Similar to the 585, but with only 1 Ethernet port. Also mainly distributed by AOL UK.
537:
changing the device's configuration such that the device can no longer be accessed;
177:
424:
A gateway aimed at business users with four Ethernet ports and 802.11n wireless.
1099:
1074:
1049:
1024:
999:
974:
949:
924:
899:
874:
849:
824:
768:
743:
697:
672:
642:
617:
592:
567:
285:
A four Ethernet port gateway with built in firewall designed for business use,
46:
42:
225:
1193:
1158:"Advisory - Multiple Vulnerabilities in Alcatel ADSL-Ethernet Bridge devices"
328:
30:
217:
250:
165:
404:
A wireless gateway with built in firewall designed for business use,
376:
261:
A single Ethernet and single USB port gateway with built in firewall.
161:
319:
The first wireless modem in the SpeedTouch line. The ST570 features
108:
72:
359:
91:
Following is a non-exhaustive list of existing SpeedTouch models:
340:
320:
238:
139:
61:
1126:"Default password on Thomson SpeedTouch wireless routers hacked"
41:
is the brand name of a line of networking equipment produced by
323:
wireless networking (11 Mbit/s) and can be secured using
192:
188:
A single Ethernet port ADSL2+ gateway with built in firewall.
157:
153:
116:
80:
64:
405:
286:
206:
104:
76:
57:
246:
210:
201:
Widely distributed ADSL modems with built in NAT router,
107:
connections for Internet connectivity. The modem uses an
249:
connections, remote management of the webinterface and
380:
SpeedTouch 587nv2 rebadged as an "O2 Wireless Box IV"
277:
A four Ethernet port gateway with built in firewall.
532:These flaws allow the following malicious actions:
111:cable to connect to a PC, or may be connected to a
49:. Before 27 January 2010 Technicolor was known as
1191:
1123:
1098:
1073:
1048:
1023:
998:
973:
948:
923:
898:
873:
848:
823:
767:
742:
696:
671:
641:
616:
591:
566:
339:A more advanced wireless modem. The ST580 has
793:
791:
789:
343:wireless networking and can be secured with
127:Same as the SpeedTouch Home, but with added
27:Brand name of a line of networking equipment
786:
193:Multi-user modems with built-in NAT router
1144:
1142:
375:
358:
264:
224:
216:
138:
29:
1117:
448:Four port ADSL2+ gateway with wireless.
14:
1192:
797:
34:Speedtouch 585v6 with wireless antenna
1139:
1092:
1067:
1042:
1017:
992:
967:
942:
917:
892:
867:
842:
817:
94:
761:
736:
715:
690:
665:
635:
610:
585:
560:
103:A modem which provides bridged and
24:
800:"Technicolor unveils new gateways"
302:
298:or WAN interface (except the 610v)
25:
1221:
1174:
229:Internal view of a SpeedTouch 516
148:SpeedTouch USB and SpeedTouch 330
1124:Mental Pitstop (November 2010).
331:. The ST570 has 1 Ethernet port.
294:ST610 / ST610i / ST610s / ST610v
798:Nastic, Goran (November 2011).
1150:San Diego Supercomputer Center
517:San Diego Supercomputer Center
408:support and remote management.
289:support and remote management.
13:
1:
554:
506:
198:ST510 1/4 ports /ST530(+USB)
7:
133:Network Address Translation
10:
1226:
243:Application Layer Gateway
86:
1154:University of California
521:University of California
485:and a built-in firewall.
129:Point-to-Point Protocol
549:
381:
364:
270:
230:
222:
144:
35:
525:
379:
362:
268:
228:
220:
142:
33:
829:"Technicolor TG582n"
69:residential gateways
1200:Networking hardware
382:
365:
271:
231:
223:
156:and not at all on
145:
95:Single-user modems
75:access equipment,
36:
16:(Redirected from
1217:
1186:
1185:
1183:Official website
1169:
1168:
1166:
1164:
1146:
1137:
1136:
1134:
1132:
1121:
1115:
1114:
1112:
1110:
1096:
1090:
1089:
1087:
1085:
1071:
1065:
1064:
1062:
1060:
1046:
1040:
1039:
1037:
1035:
1021:
1015:
1014:
1012:
1010:
996:
990:
989:
987:
985:
971:
965:
964:
962:
960:
946:
940:
939:
937:
935:
921:
915:
914:
912:
910:
896:
890:
889:
887:
885:
871:
865:
864:
862:
860:
846:
840:
839:
837:
835:
821:
815:
814:
812:
810:
795:
784:
783:
781:
779:
765:
759:
758:
756:
754:
740:
734:
733:
731:
729:
723:"Thompson ST610"
719:
713:
712:
710:
708:
694:
688:
687:
685:
683:
669:
663:
662:
660:
658:
649:. Archived from
639:
633:
632:
630:
628:
614:
608:
607:
605:
603:
589:
583:
582:
580:
578:
564:
363:SpeedTouch 585v8
135:) functionality.
21:
1225:
1224:
1220:
1219:
1218:
1216:
1215:
1214:
1190:
1189:
1181:
1180:
1177:
1172:
1162:
1160:
1147:
1140:
1130:
1128:
1122:
1118:
1108:
1106:
1097:
1093:
1083:
1081:
1072:
1068:
1058:
1056:
1047:
1043:
1033:
1031:
1022:
1018:
1008:
1006:
997:
993:
983:
981:
972:
968:
958:
956:
947:
943:
933:
931:
922:
918:
908:
906:
897:
893:
883:
881:
872:
868:
858:
856:
847:
843:
833:
831:
822:
818:
808:
806:
796:
787:
777:
775:
766:
762:
752:
750:
741:
737:
727:
725:
721:
720:
716:
706:
704:
695:
691:
681:
679:
670:
666:
656:
654:
653:on 25 June 2010
640:
636:
626:
624:
615:
611:
601:
599:
590:
586:
576:
574:
565:
561:
557:
551:
533:
531:
509:
305:
303:Wireless modems
195:
131:and basic NAT (
100:SpeedTouch Home
97:
89:
28:
23:
22:
15:
12:
11:
5:
1223:
1213:
1212:
1210:Alcatel-Lucent
1207:
1205:Technicolor SA
1202:
1188:
1187:
1176:
1175:External links
1173:
1171:
1170:
1138:
1116:
1100:Technicolor SA
1091:
1075:Technicolor SA
1066:
1050:Technicolor SA
1041:
1025:Technicolor SA
1016:
1000:Technicolor SA
991:
975:Technicolor SA
966:
950:Technicolor SA
941:
925:Technicolor SA
916:
900:Technicolor SA
891:
875:Technicolor SA
866:
850:Technicolor SA
841:
825:Technicolor SA
816:
785:
769:Technicolor SA
760:
744:Technicolor SA
735:
714:
698:Technicolor SA
689:
673:Technicolor SA
664:
643:Technicolor SA
634:
618:Technicolor SA
609:
593:Technicolor SA
584:
568:Technicolor SA
558:
556:
553:
545:
544:
541:
538:
508:
505:
504:
503:
499:
495:
494:
491:
487:
486:
479:
475:
474:
471:
467:
466:
462:
458:
457:
454:
450:
449:
446:
442:
441:
438:
434:
433:
430:
426:
425:
422:
418:
417:
414:
410:
409:
402:
398:
397:
394:
390:
389:
386:
374:
373:
369:
357:
356:
353:
349:
348:
337:
333:
332:
317:
313:
312:
309:
304:
301:
300:
299:
295:
291:
290:
283:
279:
278:
275:
269:Speedtouch 546
263:
262:
259:
255:
254:
235:
221:Speedtouch 516
215:
214:
199:
194:
191:
190:
189:
186:
182:
181:
174:
170:
169:
149:
143:Speedtouch USB
137:
136:
125:
124:Speedtouch Pro
121:
120:
115:that supports
101:
96:
93:
88:
85:
47:Technicolor SA
26:
9:
6:
4:
3:
2:
1222:
1211:
1208:
1206:
1203:
1201:
1198:
1197:
1195:
1184:
1179:
1178:
1159:
1155:
1151:
1145:
1143:
1127:
1120:
1105:
1101:
1095:
1080:
1076:
1070:
1055:
1051:
1045:
1030:
1026:
1020:
1005:
1001:
995:
980:
976:
970:
955:
951:
945:
930:
926:
920:
905:
901:
895:
880:
876:
870:
855:
851:
845:
830:
826:
820:
805:
801:
794:
792:
790:
774:
770:
764:
749:
745:
739:
724:
718:
703:
699:
693:
678:
674:
668:
652:
648:
644:
638:
623:
619:
613:
598:
594:
588:
573:
569:
563:
559:
552:
548:
542:
539:
536:
535:
534:
529:
524:
522:
518:
513:
500:
497:
496:
492:
489:
488:
484:
480:
477:
476:
472:
469:
468:
463:
460:
459:
455:
452:
451:
447:
444:
443:
439:
436:
435:
431:
428:
427:
423:
420:
419:
415:
412:
411:
407:
403:
400:
399:
395:
392:
391:
387:
384:
383:
378:
370:
367:
366:
361:
354:
351:
350:
346:
342:
338:
335:
334:
330:
329:MAC filtering
326:
322:
318:
315:
314:
310:
307:
306:
296:
293:
292:
288:
284:
281:
280:
276:
273:
272:
267:
260:
257:
256:
252:
248:
244:
240:
236:
233:
232:
227:
219:
212:
208:
204:
200:
197:
196:
187:
184:
183:
179:
175:
173:SpeedTouch PC
172:
171:
167:
163:
159:
155:
150:
147:
146:
141:
134:
130:
126:
123:
122:
118:
114:
110:
106:
102:
99:
98:
92:
84:
82:
79:handsets and
78:
74:
70:
66:
63:
59:
54:
52:
48:
44:
40:
32:
19:
1161:. Retrieved
1156:(May 2002).
1129:. Retrieved
1119:
1107:. Retrieved
1094:
1082:. Retrieved
1069:
1057:. Retrieved
1044:
1032:. Retrieved
1019:
1007:. Retrieved
994:
982:. Retrieved
969:
957:. Retrieved
944:
932:. Retrieved
919:
907:. Retrieved
894:
882:. Retrieved
869:
857:. Retrieved
844:
834:24 September
832:. Retrieved
819:
809:24 September
807:. Retrieved
804:CSI Magazine
803:
776:. Retrieved
763:
751:. Retrieved
738:
728:19 September
726:. Retrieved
717:
705:. Retrieved
692:
680:. Retrieved
667:
655:. Retrieved
651:the original
637:
625:. Retrieved
612:
600:. Retrieved
587:
575:. Retrieved
562:
550:
546:
530:
526:
514:
510:
168:and earlier.
90:
55:
50:
38:
37:
1163:22 December
1131:21 December
502:management.
347:encryption.
251:Dynamic DNS
1194:Categories
555:References
512:possible.
465:extension.
237:The first
166:Windows 95
51:Thomson SA
39:SpeedTouch
18:Speedtouch
854:"TG585v7"
677:"ST546v6"
622:"ST516v6"
597:"ST510v6"
507:Criticism
160:-powered
1109:3 August
1102:(2010).
1084:3 August
1077:(2010).
1052:(2010).
1027:(2010).
1002:(2010).
977:(2010).
952:(2010).
934:3 August
927:(2010).
909:3 August
902:(2010).
879:"TG587n"
877:(2010).
852:(2010).
827:(2011).
771:(2010).
753:3 August
746:(2010).
707:3 August
700:(2010).
675:(2010).
645:(2010).
620:(2010).
595:(2010).
570:(2010).
515:In 2002
372:"BeBox".
203:firewall
109:Ethernet
73:wireless
1104:"TG872"
1079:"TG870"
1059:29 July
1054:"TG797"
1034:29 July
1029:"TG784"
1009:27 July
1004:"TG782"
984:27 July
979:"TG712"
959:27 July
954:"TG703"
929:"ST620"
904:"TG608"
884:29 July
859:27 July
778:27 July
773:"TG580"
748:"TG185"
702:"TG605"
682:27 July
657:27 July
647:"TG536"
627:27 July
602:27 July
577:27 July
572:"TG508"
519:of the
341:802.11g
321:802.11b
43:Alcatel
245:) for
239:ADSL2+
164:or on
113:router
87:Models
65:modems
62:ADSL2+
498:TG872
490:TG870
478:TG797
470:TG784
461:TG782
453:ST780
445:TG712
437:TG703
429:TG672
421:TG670
413:ST620
401:TG608
385:TG587
368:ST585
352:TG582
336:ST580
316:ST570
308:TG185
282:TG605
274:ST546
258:ST536
234:ST516
185:TG508
158:intel
154:Linux
117:PPPoE
81:SHDSL
1165:2010
1133:2010
1111:2010
1086:2010
1061:2010
1036:2010
1011:2010
986:2010
961:2010
936:2010
911:2010
886:2010
861:2010
836:2011
811:2011
780:2010
755:2010
730:2011
709:2010
684:2010
659:2010
629:2010
604:2010
579:2010
483:DECT
406:VLAN
393:T576
327:and
287:VLAN
207:UPnP
205:and
162:Macs
105:PPTP
77:VoIP
60:and
58:ADSL
45:and
345:WPA
325:WEP
247:VPN
211:USB
178:PCI
1196::
1152:,
1141:^
802:.
788:^
176:A
71:,
67:,
53:.
1167:.
1135:.
1113:.
1088:.
1063:.
1038:.
1013:.
988:.
963:.
938:.
913:.
888:.
863:.
838:.
813:.
782:.
757:.
732:.
711:.
686:.
661:.
631:.
606:.
581:.
213:.
119:.
20:)
Text is available under the Creative Commons Attribution-ShareAlike License. Additional terms may apply.