PT-2001-2354 · D Link · D-Link Dwl-1000Ap

Published 2001-12-21 · Updated 2008-09-05 · CVE-2001-1220

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions D-Link DWL-1000AP Firmware version 3.2.28

Description The issue concerns the storage of the administrative password in plaintext in the default Management Information Base (MIB) of the affected device. This allows remote attackers to gain administrative privileges.

Recommendations For D-Link DWL-1000AP Firmware version 3.2.28, consider changing the administrative password and restricting remote access to the Management Information Base (MIB) until a patch is available. As a temporary workaround, restrict access to the device's management interface to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2001-1220

Affected Products

D-Link Dwl-1000Ap

References · 4

• http://iss.net/security_center/static/7733.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1220 · Security Note
• http://securityfocus.com/bid/3735 · Vendor Advisory
• http://securityfocus.com/archive/1/246849 · Vendor Advisory