PT-2004-2458 · Motorola · Motorola Wireless Router Wr850G

Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1550

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Motorola Wireless Router WR850G version 4.03

Description The issue allows remote attackers to bypass authentication and log on as an administrator by repeatedly making an HTTP request for "ver.asp" until an administrator logs on, potentially obtaining sensitive information.

Recommendations For Motorola Wireless Router WR850G version 4.03, consider restricting access to the "ver.asp" page as a temporary workaround until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2004-1550

Affected Products

Motorola Wireless Router Wr850G

References · 6

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/motorola/wr850g_cred.rb · Exploit
• http://securityfocus.com/bid/11241 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2004-1550 · Security Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2004-September/026791.html · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17474 · Note
• http://marc.info/?l=bugtraq&m=109613135105800&w=2 · Note