Planet Technology FGSW-2402RS Switch Backdoor Password Reset Vulnerability
BID:15014
Info
Planet Technology FGSW-2402RS Switch Backdoor Password Reset Vulnerability
| Bugtraq ID: | 15014 |
| Class: | Design Error |
| CVE: | |
| Remote: | Unknown |
| Local: | Yes |
| Published: | Oct 06 2005 12:00AM |
| Updated: | Oct 06 2005 12:00AM |
| Credit: | Luis Miguel Silva is credited with the discovery of this vulnerability. |
| Vulnerable: |
Planet Technology FGSW-2402RS 1.2 (firmware) |
| Not Vulnerable: | |
Discussion
Planet Technology FGSW-2402RS Switch Backdoor Password Reset Vulnerability
Planet Technology FGSW-2402RS switch contains a default password for resetting the system password.
An attacker can exploit this vulnerability to gain administrative access to the switch; the consequences will vary depending on the network configuration.
Reports indicate to exploit this vulnerability an attacker must have access to a machine directly connected to the vulnerable device through the RS-232 port connection.
Though uncomfirmed this vulnerability may be remotely exploitable if access to the affected device exists using some other means. This would greatly affect possible exposure to this vulnerability.
Planet Technology FGSW-2402RS switch contains a default password for resetting the system password.
An attacker can exploit this vulnerability to gain administrative access to the switch; the consequences will vary depending on the network configuration.
Reports indicate to exploit this vulnerability an attacker must have access to a machine directly connected to the vulnerable device through the RS-232 port connection.
Though uncomfirmed this vulnerability may be remotely exploitable if access to the affected device exists using some other means. This would greatly affect possible exposure to this vulnerability.
Exploit / POC
Planet Technology FGSW-2402RS Switch Backdoor Password Reset Vulnerability
No exploit is required.
No exploit is required.
Solution / Fix
Planet Technology FGSW-2402RS Switch Backdoor Password Reset Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Planet Technology FGSW-2402RS Switch Backdoor Password Reset Vulnerability
References:
References:
- Planet Technology Corp FGSW2402RS switch default password / backdoor (Luis Miguel Silva)