PT-2005-4067 · Proxim+1 · Proxim Ap-600+7

Published 2005-12-16 · Updated 2011-03-08 · CVE-2005-3253

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Avaya AP-3 through AP-6 versions 2.5 to 2.5.4 Avaya AP-7/AP-8 versions 2.5 and earlier Proxim AP-600 and AP-2000 versions prior to 2.5.5 Proxim AP-700 and AP-4000 versions 2.4.11 through 3.0

Description The issue allows remote attackers to bypass authentication due to the use of a static WEP key.

Recommendations For Avaya AP-3 through AP-6 versions 2.5 to 2.5.4, update to a version after 2.5.4. For Avaya AP-7/AP-8 versions 2.5 and earlier, update to a version after 2.5. For Proxim AP-600 and AP-2000 versions prior to 2.5.5, update to version 2.5.5 or later. For Proxim AP-700 and AP-4000 versions 2.4.11 through 3.0, update to version 3.1 or later.

Fix

Related Identifiers

CVE-2005-3253

Affected Products

Avaya Ap-3

Avaya Ap-6

Avaya Ap-7

Avaya Ap-8

Proxim Ap-2000

Proxim Ap-4000

Proxim Ap-600

Proxim Ap-700

References · 7

• http://secunia.com/advisories/18047 · Vendor Advisory
• http://support.avaya.com/elmodocs2/security/ASA-2005-233.pdf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-3253 · Security Note
• http://secunia.com/advisories/18057 · Note
• http://keygen.proxim.com/support/cs/Documents/802.1x_vulnerability.pdf · Note
• http://osvdb.org/22091 · Note
• http://vupen.com/english/advisories/2005/2931 · Note