SMC Networks SMCD3G Session Management Authentication Bypass Vulnerability
BID:46178
Info
SMC Networks SMCD3G Session Management Authentication Bypass Vulnerability
| Bugtraq ID: | 46178 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 04 2011 12:00AM |
| Updated: | Feb 04 2011 12:00AM |
| Credit: | Zack Fasel and Matthew Jakubowski |
| Vulnerable: |
SMC SMCD3G 0 |
| Not Vulnerable: | |
Discussion
SMC Networks SMCD3G Session Management Authentication Bypass Vulnerability
The SMC Networks SMCD3G gateway is prone to a remote authentication-bypass vulnerability.
An attacker can exploit this issue to gain unauthorized administrative access to the affected devices.
The SMC Networks SMCD3G gateway is prone to a remote authentication-bypass vulnerability.
An attacker can exploit this issue to gain unauthorized administrative access to the affected devices.
Exploit / POC
SMC Networks SMCD3G Session Management Authentication Bypass Vulnerability
The following exploit code is available:
The following exploit code is available:
Solution / Fix
SMC Networks SMCD3G Session Management Authentication Bypass Vulnerability
Solution:
Reportedly, this issue has been addressed in version 1.4.0.49.2. Please contact the vendor for more information.
Solution:
Reportedly, this issue has been addressed in version 1.4.0.49.2. Please contact the vendor for more information.
References
SMC Networks SMCD3G Session Management Authentication Bypass Vulnerability
References:
References:
- Product Homepage (SMC Networks)
- TWSL2011-002 (Trustwave's SpiderLabs)