PT-2005-3476 · Mentor · Adsl-Fr4Ii

Tim Brown · Publicado 2005-08-16 · Atualizado 2016-10-18 · CVE-2005-2586

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mentor ADSL-FR4II router version 2.00.0111

Description The issue concerns the storage of the web administration password in cleartext within the backup configuration file. This allows local users to access sensitive information.

Recommendations For version 2.00.0111, consider changing the web administration password regularly and restricting local access to the backup configuration file until a fix is available. As a temporary workaround, avoid using the backup configuration file or restrict access to it to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2005-2586

Produtos afetados

Adsl-Fr4Ii

Referências · 4

• http://secunia.com/advisories/16445 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2586 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112394620905095&w=2 · Nota
• http://securityfocus.com/bid/14557 · Nota