H3C ER5100 Authentication Bypass Vulnerability
BID:48384
Info
H3C ER5100 Authentication Bypass Vulnerability
| Bugtraq ID: | 48384 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 22 2011 12:00AM |
| Updated: | Jun 22 2011 12:00AM |
| Credit: | 128bit |
| Vulnerable: |
3Com H3C ER5100 0 |
| Not Vulnerable: | |
Discussion
H3C ER5100 Authentication Bypass Vulnerability
The H3C ER5100 is prone to a remote authentication-bypass vulnerability.
Attackers can exploit this issue to bypass the authentication mechanism and perform unauthorized actions.
The H3C ER5100 is prone to a remote authentication-bypass vulnerability.
Attackers can exploit this issue to bypass the authentication mechanism and perform unauthorized actions.
Exploit / POC
H3C ER5100 Authentication Bypass Vulnerability
An attacker can use a browser to exploit this issue.
The following example URIs are available:
http://www.example.com:8080/home.asp?userLogin.asp
http://www.example.com:8080/wan_NAT.asp?userLogin.asp
An attacker can use a browser to exploit this issue.
The following example URIs are available:
http://www.example.com:8080/home.asp?userLogin.asp
http://www.example.com:8080/wan_NAT.asp?userLogin.asp
Solution / Fix
H3C ER5100 Authentication Bypass Vulnerability
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of any more recent information, please mail us at: [email protected].
References
H3C ER5100 Authentication Bypass Vulnerability
References:
References: