3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities
BID:11422
Info
3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities
| Bugtraq ID: | 11422 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 15 2004 12:00AM |
| Updated: | Oct 15 2004 12:00AM |
| Credit: | These issues were reported by the vendor. |
| Vulnerable: |
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.24 firmware 3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.23 firmware 3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.13 firmware |
| Not Vulnerable: |
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.27 firmware |
Discussion
3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities
3Com OfficeConnect ADSL Wireless 11g Firewall Router is reported prone to multiple unspecified vulnerabilities. The following issues were reported:
An unspecified issue affects the DHCP service.
Another issue is related to displaying two duplicate login IPs.
An unspecified denial of service vulnerability may allow remote attackers to restart the device. This issue occurs due to insufficient boundary checks performed by the application.
3Com OfficeConnect ADSL Wireless 11g Firewall Router firmware versions prior to 1.27 are vulnerable to these issues.
**UPDATE: it should be noted that the issue described as an error in displaying two duplicate IPs has been assigned it own BID as more information has become available. Please see '3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability' (BID 11438) for more information.
3Com OfficeConnect ADSL Wireless 11g Firewall Router is reported prone to multiple unspecified vulnerabilities. The following issues were reported:
An unspecified issue affects the DHCP service.
Another issue is related to displaying two duplicate login IPs.
An unspecified denial of service vulnerability may allow remote attackers to restart the device. This issue occurs due to insufficient boundary checks performed by the application.
3Com OfficeConnect ADSL Wireless 11g Firewall Router firmware versions prior to 1.27 are vulnerable to these issues.
**UPDATE: it should be noted that the issue described as an error in displaying two duplicate IPs has been assigned it own BID as more information has become available. Please see '3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability' (BID 11438) for more information.
Exploit / POC
3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities
Solution:
The vendor has released firmware 1.27 to address these issues.
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.13 firmware
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.23 firmware
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.24 firmware
Solution:
The vendor has released firmware 1.27 to address these issues.
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.13 firmware
-
3Com 3crwe754g72-x_1_27.zip
http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCFR4
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.23 firmware
-
3Com 3crwe754g72-x_1_27.zip
http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCFR4
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.24 firmware
-
3Com 3crwe754g72-x_1_27.zip
http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCFR4
References
3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities
References:
References: