PT-2005-3476 · Mentor · Adsl-Fr4Ii

Tim Brown · Published 2005-08-16 · Updated 2016-10-18 · CVE-2005-2586

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Mentor ADSL-FR4II router version 2.00.0111

Description The issue concerns the storage of the web administration password in cleartext within the backup configuration file. This allows local users to access sensitive information.

Recommendations For version 2.00.0111, consider changing the web administration password regularly and restricting local access to the backup configuration file until a fix is available. As a temporary workaround, avoid using the backup configuration file or restrict access to it to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2005-2586

Affected Products

Adsl-Fr4Ii

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-2586 · Security Note
• http://secunia.com/advisories/16445 · Note
• http://marc.info/?l=bugtraq&m=112394620905095&w=2 · Note
• http://securityfocus.com/bid/14557 · Note