PT-2007-6457 · 3Com · 3Com 3Crwer100-75

Published 2007-10-12 · Updated 2018-10-15 · CVE-2007-5420

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: 3Com 3CRWER100-75 router version 1.2.10ww

Description: The issue allows remote attackers to obtain information about the router's existence and product details when remote management is disabled but a web server has been configured. This occurs because the router serves a web page to external clients.

Recommendations: For version 1.2.10ww, consider disabling the web server configuration to prevent external access to the router's information until a more permanent solution is available.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

CWE-16

Related Identifiers

CVE-2007-5420

Affected Products

3Com 3Crwer100-75

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2007-5420 · Security Note
• http://securityfocus.com/bid/26009 · Note
• http://osvdb.org/45490 · Note
• http://securityfocus.com/archive/1/481977/100/0/threaded · Note
• http://securityreason.com/securityalert/3217 · Note