Multiple Sagem F@st Routers 'restoreinfo.cgi' Unauthorized Access Vulnerability

Bugtraq ID:	33323
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 16 2009 12:00AM
Updated:	Mar 05 2010 04:31PM
Credit:	ALpHaNiX
Vulnerable:	Sagem F@ST 2404 0 Sagem F@ST 1500-WG 0 Sagem F@ST 1500 0 Sagem F@ST 1400W 0 Sagem F@ST 1400 0 Sagem F@ST 1240 0 Sagem F@ST 1200 0
Not Vulnerable:

Multiple Sagem F@st Routers 'restoreinfo.cgi' Unauthorized Access Vulnerability

Multiple Sagem F@st routers are prone to an unauthorized-access vulnerability.

Attackers can exploit this issue to reset the router, possibly resulting in denial-of-service conditions. Other security implications that could aid in further attacks may also occur.

The following routers are affected:

Sagem F@st 1200
Sagem F@st 1240
Sagem F@st 1400
Sagem F@st 1400W
Sagem F@st 1500
Sagem F@st 1500-WG
Sagem F@st 2404

Multiple Sagem F@st Routers 'restoreinfo.cgi' Unauthorized Access Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/33323.pl
• /data/vulnerabilities/exploits/33323-2.pl

Multiple Sagem F@st Routers 'restoreinfo.cgi' Unauthorized Access Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Sagem F@st Routers 'restoreinfo.cgi' Unauthorized Access Vulnerability

References:

• Sagem router f@st 2404 remote reset poc ([email protected])
  
• F@st 2404 Homepage (Sagem)