Hawking Technology HAR11A DSL Router Unauthenticated Administrative Access Vulnerability

Bugtraq ID:	11543
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 26 2004 12:00AM
Updated:	Oct 26 2004 12:00AM
Credit:	Marcus Garvey <[email protected]> disclosed this vulnerability.
Vulnerable:	Hawking Technology HAR11A DSL Router
Not Vulnerable:

Hawking Technology HAR11A DSL Router Unauthenticated Administrative Access Vulnerability

HAR11A DSL routers are reported susceptible to an unauthenticated administrative console access vulnerability. This issue is due to a failure of the device to require authentication credentials prior to allowing administrative access to the devices CLI interface.

Remote attackers may possibly be able to gain administrative access to affected devices.

Due to code reuse among differing hardware, other devices may also be affected. This issue may also be related to BID 8855.

Hawking Technology HAR11A DSL Router Unauthenticated Administrative Access Vulnerability

An exploit is not required.

Hawking Technology HAR11A DSL Router Unauthenticated Administrative Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Hawking Technology HAR11A DSL Router Unauthenticated Administrative Access Vulnerability

References:

• Home Page (Hawking Technologies)
  
• Hawking Technologies HAR11A router considered insecure (Marcus Garvey )