PT-2003-2209 · D Link+1 · D-Link Di-614++1

Published 2003-12-31 · Updated 2008-09-05 · CVE-2003-1264

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Longshine Wireless Access Point (WAP) LCS-883R-AC-B (affected versions not specified) D-Link DI-614+ version 2.0

Description The issue allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication. This is due to a flaw in the TFTP server.

Recommendations For Longshine Wireless Access Point (WAP) LCS-883R-AC-B, at the moment, there is no information about a newer version that contains a fix for this vulnerability. For D-Link DI-614+ version 2.0, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2003-1264

Affected Products

D-Link Di-614+

Longshine Wireless Access Point

References · 6

• 🔥 http://securityfocus.com/archive/1/305391 · Exploit
• 🔥 http://securityfocus.com/archive/1/305344 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2003-1264 · Security Note
• http://securityfocus.com/bid/6533 · Note
• http://iss.net/security_center/static/10997.php · Note
• http://securitytracker.com/id?1005897 · Note