3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability
BID:11438
Info
3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability
| Bugtraq ID: | 11438 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 18 2004 12:00AM |
| Updated: | Oct 18 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Cyrille Barthelemy <[email protected]>. |
| Vulnerable: |
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.24 firmware 3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.23 firmware 3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.13 firmware 3Com 3CRWE754G72-A Wireless Connectivity Devices |
| Not Vulnerable: |
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.27 firmware |
Discussion
3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability
3Com OfficeConnect ADSL Wireless 11g Firewall Router is affected by an authentication bypass vulnerability; This issue is due to a failure of the device to properly validate an authenticated administrator.
An attacker could leverage this issue to gain administrative access to the affective device facilitating disclosure of administrator passwords, WEP encryption keys, configuration manipulation and denial of service.
It should be noted that this issue was originally reported in vulnerability report '3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities' (BID 11422). It has been assigned its own BID as more information has been made available.
3Com OfficeConnect ADSL Wireless 11g Firewall Router is affected by an authentication bypass vulnerability; This issue is due to a failure of the device to properly validate an authenticated administrator.
An attacker could leverage this issue to gain administrative access to the affective device facilitating disclosure of administrator passwords, WEP encryption keys, configuration manipulation and denial of service.
It should be noted that this issue was originally reported in vulnerability report '3Com OfficeConnect ADSL Wireless 11g Firewall Router Multiple Unspecified Vulnerabilities' (BID 11422). It has been assigned its own BID as more information has been made available.
Exploit / POC
3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability
No exploit is required to leverage this issue.
No exploit is required to leverage this issue.
Solution / Fix
3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability
Solution:
The vendor has released updated firmware resolving this issue.
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.13 firmware
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.23 firmware
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.24 firmware
Solution:
The vendor has released updated firmware resolving this issue.
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.13 firmware
-
3Com 3crwe754g72-x_1_27.zip
http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCFR4
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.23 firmware
-
3Com 3crwe754g72-x_1_27.zip
http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCFR4
3Com OfficeConnect ADSL Wireless 11g Firewall Router 1.24 firmware
-
3Com 3crwe754g72-x_1_27.zip
http://webprd1.3com.com/swd/jsp/user/index.jsp?id=OCFR4
References
3Com OfficeConnect ADSL Wireless 11g Firewall Router Authentication Bypass Vulnerability
References:
References: