3Com OfficeConnect Remote 812 ADSL Router Web Interface Authentication Bypass Vulnerability

Bugtraq ID:	10426
Class:	Access Validation Error
CVE:	CVE-2004-0477
Remote:	Yes
Local:	No
Published:	May 27 2004 12:00AM
Updated:	Jul 12 2009 05:16AM
Credit:	Discovery of this issue is credited to Rafel Ivgi.
Vulnerable:	3Com OfficeConnect Remote 812 ADSL Router 1.1.9 .4 3Com OfficeConnect Remote 812 ADSL Router
Not Vulnerable:

3Com OfficeConnect Remote 812 ADSL Router Web Interface Authentication Bypass Vulnerability

3Com OfficeConnect Remote 812 ADSL Router is reportedly affected by an authentication bypass vulnerability through its web configuration interface.

Successful exploitation of this issue would allow an attacker to gain administrative access to the affected device.

3Com OfficeConnect Remote 812 ADSL Router Web Interface Authentication Bypass Vulnerability

No exploit is required to leverage this issue.

3Com OfficeConnect Remote 812 ADSL Router Web Interface Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

3Com OfficeConnect Remote 812 ADSL Router Web Interface Authentication Bypass Vulnerability

References:

• SecurityAdvisory05.27.04-3Com OfficeConnect Remote 812 ADSL Router Auth. Bypass (iDEFENSE)