Siemens SpeedStream Wireless Router Authentication Bypass Vulnerability

Bugtraq ID:	18843
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 28 2006 12:00AM
Updated:	Jul 07 2006 07:09PM
Credit:	Digital Armaments is credited with discovering this vulnerability.
Vulnerable:	Siemens Speedstream Wireless Router 2624
Not Vulnerable:

Siemens SpeedStream Wireless Router Authentication Bypass Vulnerability

Siemens SpeedStream Wireless Router web interface is prone to an authentication-bypass vulnerability.

This may permit an attacker to bypass the authentication mechanism and to gain access to the web interface.

Version 2624 is vulnerable; other versions may be affected.

Siemens SpeedStream Wireless Router Authentication Bypass Vulnerability

Attackers can exploit this issue through a web client.

Siemens SpeedStream Wireless Router Authentication Bypass Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please email us at: [email protected]:[email protected].

Siemens SpeedStream Wireless Router Authentication Bypass Vulnerability

References:

• Siemens Homepage (Siemens)
  
• Siemens Speedstream Wireless Router Password Protection Bypass Vulnerability (Digital Armaments)