CVE-2003-1515: Origo ASR-8100 ADSL Router 3.21 has an administration service running on port 254 that does not require a p...

Security readout for executives and security teams

CVE-2003-1515 describes an Origo ASR-8100 ADSL Router 3.21 issue where an administration service can be reached without a password. A remote attacker could restore factory defaults, disrupting connectivity and device configuration. The sources do not show code execution, data theft, a CVSS score, or a vendor patch. Exposure is most likely where legacy Origo ASR-8100 routers still exist and their port 254 administration service is reachable from untrusted networks. The source bundle does not provide reliable internet-wide prevalence data. Treat this as a legacy edge-device risk. It can cause business disruption if exposed, but the provided evidence does not indicate active exploitation or compromise beyond factory reset denial of service. Mitigation focus: Identify and retire affected Origo ASR-8100 3.21 devices where feasible.; Block untrusted access to the router administration service, especially port 254.; Restrict management access to trusted administrative networks or VPN paths..

Prepared

Jun 29, 2026, 02:08 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.