Linksys WAP610N Unauthenticated Root Access Security Vulnerability

Bugtraq ID:	46305
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 10 2011 12:00AM
Updated:	Feb 14 2011 10:59AM
Credit:	Matteo Ignaccolo
Vulnerable:	Cisco Linksys WAP610N 1.0.1 Cisco Linksys WAP610N 1.0
Not Vulnerable:

Linksys WAP610N Unauthenticated Root Access Security Vulnerability

The Linksys WAP610N is prone to a security vulnerability that allows unauthenticated root access.

An attacker can exploit this issue to gain unauthorized root access to affected devices. Successful exploits will result in the complete compromise of an affected device.

Linksys WAP610N firmware versions 1.0.01 and 1.0.00 are vulnerable; other versions may also be affected.

Linksys WAP610N Unauthenticated Root Access Security Vulnerability

Attackers can use readily available tools to exploit this issue.

Linksys WAP610N Unauthenticated Root Access Security Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Linksys WAP610N Unauthenticated Root Access Security Vulnerability

References:

• Linksys Homepage (Cisco)
  
• Linksys Vulnerability Reference (Secure Network)