PT-2007-6457 · 3Com · 3Com 3Crwer100-75

Publicado 2007-10-12 · Atualizado 2018-10-15 · CVE-2007-5420

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: 3Com 3CRWER100-75 router version 1.2.10ww

Description: The issue allows remote attackers to obtain information about the router's existence and product details when remote management is disabled but a web server has been configured. This occurs because the router serves a web page to external clients.

Recommendations: For version 1.2.10ww, consider disabling the web server configuration to prevent external access to the router's information until a more permanent solution is available.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

CWE-16

Identificadores relacionados

CVE-2007-5420

Produtos afetados

3Com 3Crwer100-75

Referências · 5

• http://securityfocus.com/bid/26009 · Nota
• http://osvdb.org/45490 · Nota
• http://securityfocus.com/archive/1/481977/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5420 · Nota de Segurança
• http://securityreason.com/securityalert/3217 · Nota