PT-2004-2591 · Smc · Smc7004Vwbr+1

Publicado

2004-09-15

·

Atualizado

2017-07-11

·

CVE-2004-1685

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions SMC7004VWBR version 1.00.014 SMC7008ABR EU version 1.42.003
Description The issue allows remote attackers to bypass authentication by connecting from the same IP address as the logged-in administrator and then accessing the "setup status.htm" or "status.HTM" pages.
Recommendations For SMC7004VWBR version 1.00.014, as a temporary workaround, consider restricting access to the "setup status.htm" and "status.HTM" pages until a patch is available. For SMC7008ABR EU version 1.42.003, as a temporary workaround, consider restricting access to the "setup status.htm" and "status.HTM" pages until a patch is available.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-1685

Produtos afetados

Smc7004Vwbr
Smc7008Abr Eu