PT-2005-2545 · Acrowave · Acrowave Aap-3100Ar

Martin Tornwall · Publicado 2005-05-14 · Atualizado 2016-10-18 · CVE-2005-1566

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acrowave AAP-3100AR wireless router (affected versions not specified)

Description The issue allows remote attackers to bypass authentication. This is achieved by pressing CTRL-C at the username or password prompt in a telnet session, causing the shell to crash and restart. After the restart, the attacker is left in the new shell without proper authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2005-1566

Produtos afetados

Acrowave Aap-3100Ar

Referências · 4

• http://osvdb.org/16445 · Aviso do Fabricante
• http://secunia.com/advisories/15343 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=111592452331677&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1566 · Nota de Segurança