ELSA Lancom 1100 Office Insecure Web Administration Vulnerability
BID:3746
Info
ELSA Lancom 1100 Office Insecure Web Administration Vulnerability
| Bugtraq ID: | 3746 |
| Class: | Origin Validation Error |
| CVE: |
CVE-2001-1223 |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 26 2001 12:00AM |
| Updated: | Jul 11 2009 09:06AM |
| Credit: | Discovered by Davide Del Vecchio <[email protected]> and posted to the BugTraq mailing list on December 26, 2001. |
| Vulnerable: |
ELSA Lancom 1100 Office |
| Not Vulnerable: | |
Discussion
ELSA Lancom 1100 Office Insecure Web Administration Vulnerability
The ELSA Lancom 1100 Office router provides a wide variety of functionality for a small office enviroment, including DNS and DHCP service. It may be administered remotely through a number of mechanisms, including a web based interface.
Unfortunately, the web interface does not require authentication. Unauthorized users accessing the web pages may perform a variety of malicious actions. One of the exposed pages includes the RAS password in the html provided by the server, used to control remote access to the local network. It is also possible to upload new firmware to the router, potentially leading to far more severe attacks.
It is possible that other products in the Lancom line share this vulnerability.
The ELSA Lancom 1100 Office router provides a wide variety of functionality for a small office enviroment, including DNS and DHCP service. It may be administered remotely through a number of mechanisms, including a web based interface.
Unfortunately, the web interface does not require authentication. Unauthorized users accessing the web pages may perform a variety of malicious actions. One of the exposed pages includes the RAS password in the html provided by the server, used to control remote access to the local network. It is also possible to upload new firmware to the router, potentially leading to far more severe attacks.
It is possible that other products in the Lancom line share this vulnerability.
Exploit / POC
ELSA Lancom 1100 Office Insecure Web Administration Vulnerability
This vulnerability can be exploited with a web browser.
This vulnerability can be exploited with a web browser.
Solution / Fix
ELSA Lancom 1100 Office Insecure Web Administration Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
ELSA Lancom 1100 Office Insecure Web Administration Vulnerability
References:
References: