PT-2004-2458 · Motorola · Motorola Wireless Router Wr850G

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Motorola Wireless Router WR850G version 4.03

Description The issue allows remote attackers to bypass authentication and log on as an administrator by repeatedly making an HTTP request for "ver.asp" until an administrator logs on, potentially obtaining sensitive information.

Recommendations For Motorola Wireless Router WR850G version 4.03, consider restricting access to the "ver.asp" page as a temporary workaround until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2004-1550

Produtos afetados

Motorola Wireless Router Wr850G

Referências · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/motorola/wr850g_cred.rb · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17474 · Nota
• http://securityfocus.com/bid/11241 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2004-1550 · Nota de Segurança
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026791.html · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=109613135105800&w=2 · Nota