CVE-2004-0680: Zoom X3 ADSL modem has a terminal running on port 254 that can be accessed using the default HTML managemen...

Security readout for executives and security teams

This is a legacy router-management exposure in the Zoom X3 ADSL modem. A terminal service on port 254 can still accept the default HTML management password even after the web interface password is changed. If reachable by an attacker, it may allow unauthorized administrative access to the modem. Most likely exposure is legacy Zoom X3 ADSL modem deployments, especially devices with management services reachable from the internet, ISP networks, or untrusted internal segments. Current affected versions and supported firmware status are not defined in the provided sources. Treat this as a legacy asset exposure issue. It is not marked as actively exploited in the provided sources, but any reachable affected modem could provide unauthorized administrative access. Prioritize inventory, isolation, and replacement of unsupported devices. Mitigation focus: Inventory environments for Zoom X3 ADSL modems and related legacy DSL routers.; Block external and untrusted access to TCP port 254 on affected devices.; Do not rely on changing only the HTTP management password..

Prepared

Jun 30, 2026, 04:50 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.