CVE-2006-0947

CVE-2006-0947 describes a vulnerability in Thomson SpeedTouch modems running firmware 5.3.2.6.0, where remote attackers can create undeletable user accounts. This is achieved by injecting scripting code into the "31" parameter of the NewUser function, which the modem fails to properly filter during account creation. The vulnerability has a CVSS score of 7.5 (High), indicating a critical risk due to its network-based attack vector, low attack complexity, and potential for partial confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation or Metasploit/Nuclei modules, an exploit demonstrating persistent user creation is available on ExploitDB, though community discussion and media coverage are minimal.