PT-2003-2291 · D Link · Airplus Access Point Manager+1

Jason Tedesco · Publicado 2003-12-31 · Atualizado 2017-07-29 · CVE-2003-1346

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link wireless access point DWL-900AP+ versions 2.2 through 2.5

Description The issue allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.

Recommendations For version 2.2, avoid using the AirPlus Access Point Manager to upgrade firmware until a fix is available. For version 2.3, restrict access to the firmware upgrade feature in the AirPlus Access Point Manager. For version 2.5, consider disabling the AirPlus Access Point Manager until a patch is available.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2003-1346

Produtos afetados

Airplus Access Point Manager

Dwl-900Ap+

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/11074 · Nota
• http://securitytracker.com/id?1005926 · Nota
• http://marc.info/?l=bugtraq&m=104311601319909&w=2 · Nota
• http://marc.info/?l=bugtraq&m=104267037431451&w=2 · Nota
• http://securityfocus.com/bid/6609 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1346 · Nota de Segurança