PT-2002-3092 · Netdsl+1 · Netdsl Adsl Modem 800+1

Publicado 2002-12-31 · Atualizado 2008-09-05 · CVE-2002-2380

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions NetDSL ADSL Modem 800 with Microsoft Network firmware version 5.5.11

Description The issue allows remote attackers to gain access to configuration menus by sniffing undocumented usernames and passwords from network traffic.

Recommendations For NetDSL ADSL Modem 800 with Microsoft Network firmware version 5.5.11, consider changing the default or undocumented usernames and passwords to strong, unique credentials to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2002-2380

Produtos afetados

Network

Netdsl Adsl Modem 800

Referências · 4

• http://iss.net/security_center/static/10498.php · Nota
• http://securityfocus.com/bid/6064 · Nota
• http://cert.uni-stuttgart.de/archive/bugtraq/2002/10/msg00416.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2002-2380 · Nota de Segurança