Acrowave AAP-3100AR Wireless Router Authentication Bypass Vulnerability

Bugtraq ID:	13613
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 12 2005 12:00AM
Updated:	May 12 2005 12:00AM
Credit:	"Martin Tornwall" <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	Acrowave AAP-3100AR Router
Not Vulnerable:

Acrowave AAP-3100AR Wireless Router Authentication Bypass Vulnerability

Acrowave AAP-3100AR routers are susceptible to an authentication bypass vulnerability.

This vulnerability allows remote attackers to gain administrative access to affected devices.

Due to code reuse, it is likely that other devices are also vulnerable to this issue.

Acrowave AAP-3100AR Wireless Router Authentication Bypass Vulnerability

An exploit is not required.

Acrowave AAP-3100AR Wireless Router Authentication Bypass Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Acrowave AAP-3100AR Wireless Router Authentication Bypass Vulnerability

References:

• AAP-3100AR Router Product Page (Acrowave)
  
• Acrowave AAP-3100AR authetication bypass ("Martin Tornwall" )