PT-2001-2354 · D Link · D-Link Dwl-1000Ap

Publicado 2001-12-21 · Atualizado 2008-09-05 · CVE-2001-1220

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DWL-1000AP Firmware version 3.2.28

Description The issue concerns the storage of the administrative password in plaintext in the default Management Information Base (MIB) of the affected device. This allows remote attackers to gain administrative privileges.

Recommendations For D-Link DWL-1000AP Firmware version 3.2.28, consider changing the administrative password and restricting remote access to the Management Information Base (MIB) until a patch is available. As a temporary workaround, restrict access to the device's management interface to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2001-1220

Produtos afetados

D-Link Dwl-1000Ap

Referências · 4

• http://iss.net/security_center/static/7733.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2001-1220 · Nota de Segurança
• http://securityfocus.com/bid/3735 · Aviso do Fabricante
• http://securityfocus.com/archive/1/246849 · Aviso do Fabricante