Multiple Precidia Devices Unspecified Memory Corruption and Authentication Bypass Vulnerabilities
BID:34742
Info
Multiple Precidia Devices Unspecified Memory Corruption and Authentication Bypass Vulnerabilities
| Bugtraq ID: | 34742 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 27 2009 12:00AM |
| Updated: | Apr 28 2009 09:16PM |
| Credit: | Steven James and princeofnigeria and r@b13$ from Digital Defense, Inc. Vulnerability Research Team |
| Vulnerable: |
Precidia Technologies Ether3201-232 3.0.250 Precidia Technologies Ether232 Duo 5.0.2 |
| Not Vulnerable: | |
Discussion
Multiple Precidia Devices Unspecified Memory Corruption and Authentication Bypass Vulnerabilities
Multiple Precidia devices are prone to unspecified memory-corruption and authentication-bypass vulnerabilities. These issues affect the devices' webserver.
The impact of these issues is currently unknown, but successful exploits presumably could allow remote attackers to execute arbitrary code, resulting in the complete compromise of an affected device. Failed exploit attempts will likely cause denial-of-service conditions.
The following devices are vulnerable:
Precidia Ether3201-232 running firmware 3.00.250
Precidia Ether232 Duo running firmware 5.00.02
Other devices and firmwares may also be affected.
Multiple Precidia devices are prone to unspecified memory-corruption and authentication-bypass vulnerabilities. These issues affect the devices' webserver.
The impact of these issues is currently unknown, but successful exploits presumably could allow remote attackers to execute arbitrary code, resulting in the complete compromise of an affected device. Failed exploit attempts will likely cause denial-of-service conditions.
The following devices are vulnerable:
Precidia Ether3201-232 running firmware 3.00.250
Precidia Ether232 Duo running firmware 5.00.02
Other devices and firmwares may also be affected.
Exploit / POC
Multiple Precidia Devices Unspecified Memory Corruption and Authentication Bypass Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Multiple Precidia Devices Unspecified Memory Corruption and Authentication Bypass Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple Precidia Devices Unspecified Memory Corruption and Authentication Bypass Vulnerabilities
References:
References:
- Vendor Homepage (Precidia Technologies)
- DDIVRT-2009-24 Precidia Ether232 Memory Corruption ([email protected])