Wayport CyberCenter Express Authentication Bypass Vulnerability

Bugtraq ID:	28692
Class:	Access Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Apr 08 2008 12:00AM
Updated:	Apr 16 2008 12:28AM
Credit:	Pascal Cretain
Vulnerable:	Wayport CyberCenter Express 0
Not Vulnerable:

Wayport CyberCenter Express Authentication Bypass Vulnerability

Wayport CyberCenter Express devices are prone to an authentication-bypass vulnerability.

Successful exploits allow attackers to bypass authentication on affected devices. This allows them free, unauthorized access to the internet, aids them in further attacks against the device, or allows them to use the device for attacks against other hosts.

Wayport CyberCenter Express Authentication Bypass Vulnerability

To exploit this issue, attackers require physical access to affected devices.

Wayport CyberCenter Express Authentication Bypass Vulnerability

Solution:
The reporter states that the vendor is deploying fixes for this issue. Users of affected devices should contact the vendor for information on obtaining and applying fixes.

Wayport CyberCenter Express Authentication Bypass Vulnerability

References:

• CyberCenter Express Product Page (Wayport)
  
• Wayport Public Access PC Authentication Bypass Weakness ("Pascal Cretain" )