PT-2002-1899 · 3Com · 3Com Officeconnect Remote 812 Adsl Router

Published 2002-08-31 · Updated 2012-05-12 · CVE-2002-0888

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: 3Com OfficeConnect Remote 812 ADSL Router versions 1.1.7 through 1.1.9

Description: The issue allows remote attackers to bypass port access restrictions. This is achieved by connecting to an approved port and then quickly connecting to the desired port, which the router allows.

Recommendations: For versions 1.1.7 through 1.1.9, consider restricting access to approved ports to minimize the risk of exploitation. As a temporary workaround, limit the ability to quickly connect to different ports. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-0888

Affected Products

3Com Officeconnect Remote 812 Adsl Router

References · 5

• http://iss.net/security_center/static/9185.php · Vendor Advisory
• http://securityfocus.com/bid/4841 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0888 · Security Note
• http://archives.neohapsis.com/archives/bugtraq/2002-06/0102.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2002-05/0230.html · Note