PT-2005-2545 · Acrowave · Acrowave Aap-3100Ar

Martin Tornwall · Published 2005-05-14 · Updated 2016-10-18 · CVE-2005-1566

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Acrowave AAP-3100AR wireless router (affected versions not specified)

Description The issue allows remote attackers to bypass authentication. This is achieved by pressing CTRL-C at the username or password prompt in a telnet session, causing the shell to crash and restart. After the restart, the attacker is left in the new shell without proper authentication.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-1566

Affected Products

Acrowave Aap-3100Ar

References · 4

• http://osvdb.org/16445 · Vendor Advisory
• http://secunia.com/advisories/15343 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1566 · Security Note
• http://marc.info/?l=bugtraq&m=111592452331677&w=2 · Note