PT-2009-1867 · 3Com · 3Com Wireless 8760 Dual Radio 11A/B/G Poe Access Point

Published 2009-03-04 · Updated 2017-08-17 · CVE-2008-6395

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions: 3Com Wireless 8760 Dual Radio 11a/b/g PoE Access Point (affected versions not specified)

Description: The issue concerns the web management interface, where remote attackers can cause a denial of service, leading to a device crash. This is achieved by sending a malformed HTTP POST request.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2008-6395

Affected Products

3Com Wireless 8760 Dual Radio 11A/B/G Poe Access Point

References · 6

• http://secunia.com/advisories/31714 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2008-6395 · Security Note
• http://lists.grok.org.uk/pipermail/full-disclosure/2008-September/064226.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44890 · Note
• http://securityfocus.com/bid/30988 · Note
• http://securitytracker.com/id?1020807 · Note