Motorola WR850G Wireless Router Remote Authentication Bypass Vulnerability

Bugtraq ID:	11241
Class:	Design Error
CVE:	CVE-2004-1550
Remote:	Yes
Local:	No
Published:	Sep 23 2004 12:00AM
Updated:	Jul 12 2009 07:06AM
Credit:	Discovery is credited to Daniel Fabian.
Vulnerable:	Motorola WR850G 4.0 3 firmware
Not Vulnerable:	Motorola WR850G 5.13 firmware

Motorola WR850G Wireless Router Remote Authentication Bypass Vulnerability

Motorola WR850G wireless router is reported prone to a remote authentication bypass vulnerability. This issue is caused by a design error and may allow an attacker to ultimately take complete control over the device.

A remote attacker can gain access to the Web interface of the affected device by periodically attempting to access restricted pages such as the 'ver.asp' script.

Motorola wireless router WR850G running firmware version 4.03 is reportedly affected by this issue. It is possible that other models and firmware versions are affected as well.

Motorola WR850G Wireless Router Remote Authentication Bypass Vulnerability

An exploit is not required to leverage this issue.

Motorola WR850G Wireless Router Remote Authentication Bypass Vulnerability

Solution:
The vendor has released firmware 5.13 to address this issue.


Motorola WR850G 4.0 3 firmware

• Motorola Motorola_WR850G_5.13.exe
  http://broadband.motorola.com/consumers/products/WR850g/downloads/Moto rola_WR850G_5.13.exe

Motorola WR850G Wireless Router Remote Authentication Bypass Vulnerability

References:

• WR850G Product Page (Motorola)
  
• Motorola Wireless Router WR850G Authentication Circumvention ("Daniel Fabian" )