hkm has reported a vulnerability in Siemens SpeedStream 5200, which can be exploited by malicious people to bypass certain security restrictions.

The vulnerability is caused due to an error in the authentication process when processing HTTP "Host" headers. This can be exploited to bypass authentication and e.g. download the router configuration via an HTTP request containing a wrong "Host" header.

Solution
Restrict access to the affected device.

Provided and/or discovered by
hkm

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://milw0rm.com/exploits/7055

Deep Links
Links available to Secunia VIM customers