PT-2004-2941 · Conceptronic · Conceptronic Cadslr1 Adsl Router

Publicado

2004-12-31

·

Atualizado

2017-07-11

·

CVE-2004-2045

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions Conceptronic CADSLR1 ADSL router version 3.04n
Description The issue concerns the HTTP administration interface, where remote attackers can cause a denial of service, resulting in a device reboot. This can be achieved by sending an HTTP request with a long username.
Recommendations For Conceptronic CADSLR1 ADSL router version 3.04n, as a temporary workaround, consider restricting access to the HTTP administration interface to minimize the risk of exploitation. Avoid using long username values in the affected HTTP requests until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2004-2045

Produtos afetados

Conceptronic Cadslr1 Adsl Router