ALPHA Networks ADSL Wireless Router 'returnJSON.htm' Administrator Password Disclosure Vulnerability

Bugtraq ID:	55092
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 17 2012 12:00AM
Updated:	Aug 17 2012 12:00AM
Credit:	Alberto Ortega
Vulnerable:	ALPHA Networks ADSL2/2+ Wireless Router (ASL-26555) 0
Not Vulnerable:

ALPHA Networks ADSL Wireless Router 'returnJSON.htm' Administrator Password Disclosure Vulnerability

ALPHA Networks ADSL Wireless Router is prone to a password-disclosure vulnerability due to a design error.

Attackers can exploit this issue to gain access to the administrator's password. Successfully exploiting this issue may lead to other attacks.

ALPHA Networks ADSL Wireless Router 'returnJSON.htm' Administrator Password Disclosure Vulnerability

An attacker can use a browser to exploit this issue.

ALPHA Networks ADSL Wireless Router 'returnJSON.htm' Administrator Password Disclosure Vulnerability

References:

• Vendor Homepage (ALPHA Neworks)