U.S. Robotics Broadband Router 8003 Administration Web Interface Insecure Password Vulnerability

Bugtraq ID:	10490
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 08 2004 12:00AM
Updated:	Jun 08 2004 12:00AM
Credit:	This issue was discovered by Fernando Sanchez <[email protected]>.
Vulnerable:	U.S.Robotics Broadband Router 8003
Not Vulnerable:

U.S. Robotics Broadband Router 8003 Administration Web Interface Insecure Password Vulnerability

U.S. Robotics Broadband Router 8003 is affected by an administration web interface insecure password vulnerability. This issue is due to a design error that allows the device's administrator password to be read in plain text.

This issue would allow an attacker to gain administrative access to the affected device allowing for the manipulation of such things as Internet access controls. This might also aiding further attacks against computers on the local area network.

U.S. Robotics Broadband Router 8003 Administration Web Interface Insecure Password Vulnerability

No exploit is required to leverage this issue.

U.S. Robotics Broadband Router 8003 Administration Web Interface Insecure Password Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

U.S. Robotics Broadband Router 8003 Administration Web Interface Insecure Password Vulnerability

References:

• U.S.Robotics Homepage (U.S.Robotics)
  
• U.S. Robotics Broadband Router 8003 admin password visible (Fernando Sanchez )