PT-2004-1466 · Linksys · Linksys Wap55Ag

Nn Poster

·

Publicado

2004-03-18

·

Atualizado

2017-07-11

·

CVE-2004-0312

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions Linksys WAP55AG version 1.07
Description The issue allows remote attackers with access to an SNMP read-only community string to gain access to read/write community strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2. This could potentially lead to unauthorized access and modification of the device's configuration.
Recommendations For Linksys WAP55AG version 1.07, as a temporary workaround, consider restricting access to the SNMP service until a patch is available. Additionally, changing the SNMP read-only community string to a more secure value may help minimize the risk of exploitation.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-0312

Produtos afetados

Linksys Wap55Ag