Axesstel MV 410R Multiple Remote Vulnerabilites and Weakness

Bugtraq ID:	35563
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Jul 02 2009 12:00AM
Updated:	Jul 08 2009 04:36PM
Credit:	Filip Palian
Vulnerable:	Axesstel MV 410R 0
Not Vulnerable:

Axesstel MV 410R Multiple Remote Vulnerabilites and Weakness

Axesstel MV 410R is prone to these remote vulnerabilities and a weakness:

- A login-enumeration weakness
- An information-disclosure vulnerability
- A remote code-execution vulnerability
- An HTML-injection vulnerability
- A URL-redirection vulnerability

An attacker can exploit these issues to gain access to valid login credentials, obtain sensitive information, execute arbitrary code, steal cookie-based authentication credentials, and redirect victims to a malicious site. Other attacks are also possible.

Axesstel MV 410R Multiple Remote Vulnerabilites and Weakness

An attacker can exploit these issues through a browser or using readily available network utilities. To exploit some of these issues, the attacker must entice an unsuspecting victim to follow a malicious URI.

Axesstel MV 410R Multiple Remote Vulnerabilites and Weakness

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Axesstel MV 410R Multiple Remote Vulnerabilites and Weakness

References:

• Vendor Homepage (Axesstel)
  
• Multiple Flaws in Axesstel MV 410R ([email protected])