PT-2008-2854 · Airspan · Airspan Wimax Prost

Arthur Lashin + 1 · Publicado 2008-03-10 · Atualizado 2018-10-11 · CVE-2008-1262

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Airspan WiMax ProST version 4.1 with software 6.5.38.0

Description The administration panel of the affected device does not verify authentication credentials. This allows remote attackers to upload malformed firmware or bind the antenna to a different WiMAX base station via requests to forms under "process adv/".

Recommendations For Airspan WiMax ProST version 4.1 with software 6.5.38.0, consider restricting access to the administration panel and the "process adv/" endpoint to minimize the risk of exploitation. Avoid using the administration panel until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-1262

Produtos afetados

Airspan Wimax Prost

Referências · 12

• 🔥 http://airspan4wimax.googlepages.com · Exploit
• 🔥 http://securityfocus.com/bid/28122 · Exploit
• 🔥 https://exploit-db.com/exploits/31342 · Exploit
• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41052 · Nota
• http://vupen.com/english/advisories/2008/0802/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1262 · Nota de Segurança
• http://0x000000.com/?i=524 · Nota
• http://secunia.com/advisories/29265 · Aviso do Fabricante
• http://sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820 · Nota
• http://kb.cert.org/vuls/id/248372 · Nota