Opengear Console Servers Unspecified Authentication Bypass Vulnerability
BID:50536
Info
Opengear Console Servers Unspecified Authentication Bypass Vulnerability
| Bugtraq ID: | 50536 |
| Class: | Access Validation Error |
| CVE: |
CVE-2011-3997 CVE-2011-3997 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 04 2011 12:00AM |
| Updated: | Mar 19 2015 07:35AM |
| Credit: | Tadayoshi Nakahira |
| Vulnerable: |
Opengear Console Server 0 |
| Not Vulnerable: |
Opengear Console Server 2.2.1 |
Discussion
Opengear Console Servers Unspecified Authentication Bypass Vulnerability
Opengear Console Servers are prone to a remote authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication process. Successful exploits will allow an attacker to change settings in an affected Console Server or gain access to applications that are connected to the console server.
Versions prior to Opengear Console Server 2.2.1 are vulnerable.
Opengear Console Servers are prone to a remote authentication-bypass vulnerability.
An attacker can exploit this issue to bypass the authentication process. Successful exploits will allow an attacker to change settings in an affected Console Server or gain access to applications that are connected to the console server.
Versions prior to Opengear Console Server 2.2.1 are vulnerable.
Exploit / POC
Opengear Console Servers Unspecified Authentication Bypass Vulnerability
An attacker can use readily available network utilities to exploit this issue.
An attacker can use readily available network utilities to exploit this issue.
Solution / Fix
Opengear Console Servers Unspecified Authentication Bypass Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.
References
Opengear Console Servers Unspecified Authentication Bypass Vulnerability
References:
References: