PT-2001-2356 · Elsa · Elsa Lancom 1100 Office

Published 2001-12-26 · Updated 2008-09-05 · CVE-2001-1223

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ELSA Lancom 1100 Office (affected versions not specified)

Description The issue concerns the web administration server of the ELSA Lancom 1100 Office, which does not require authentication. This allows remote attackers to gain administrative privileges by simply connecting to the server.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2001-1223

Affected Products

Elsa Lancom 1100 Office

References · 4

• http://securityfocus.com/bid/3746 · Vendor Advisory
• http://iss.net/security_center/static/7739.php · Vendor Advisory
• http://securityfocus.com/archive/1/247274 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2001-1223 · Security Note