PT-2008-2854 · Airspan · Airspan Wimax Prost

Arthur Lashin + 1 · Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1262

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Airspan WiMax ProST version 4.1 with software 6.5.38.0

Description The administration panel of the affected device does not verify authentication credentials. This allows remote attackers to upload malformed firmware or bind the antenna to a different WiMAX base station via requests to forms under "process adv/".

Recommendations For Airspan WiMax ProST version 4.1 with software 6.5.38.0, consider restricting access to the administration panel and the "process adv/" endpoint to minimize the risk of exploitation. Avoid using the administration panel until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Improper Authentication

Weakness Enumeration

CWE-287

Related Identifiers

CVE-2008-1262

Affected Products

Airspan Wimax Prost

References · 12

• 🔥 http://airspan4wimax.googlepages.com · Exploit
• 🔥 http://securityfocus.com/bid/28122 · Exploit
• 🔥 https://exploit-db.com/exploits/31342 · Exploit
• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1262 · Security Note
• http://secunia.com/advisories/29265 · Vendor Advisory
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41052 · Note
• http://vupen.com/english/advisories/2008/0802/references · Note
• http://0x000000.com/?i=524 · Note
• http://sharemethods.net/nepal/servlet/open?keeppath=false&aid=29820 · Note
• http://kb.cert.org/vuls/id/248372 · Note