PT-2010-3244 · Linksys · Linksys Wap54Gv3

Published 2010-06-10 · Updated 2024-02-13 · CVE-2010-1573

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linksys WAP54Gv3 firmware versions 3.04.03 and earlier

Description The issue allows remote attackers to execute arbitrary commands due to the use of hard-coded credentials for a debug interface on certain web pages. Specifically, the hard-coded username is Gemtek and the password is gemtekswd. Attackers can exploit this via the data1, data2, or data3 parameters to the "Debug command page.asp" and "debug.cgi" API endpoints.

Recommendations For Linksys WAP54Gv3 firmware versions 3.04.03 and earlier, consider changing the hard-coded username and password for the debug interface as a temporary workaround. Restrict access to the "Debug command page.asp" and "debug.cgi" API endpoints to minimize the risk of exploitation. Avoid using the data1, data2, or data3 parameters in these endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2010-1573

Affected Products

Linksys Wap54Gv3

References · 8

• 🔥 http://icysilence.org/?p=268 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-1573 · Security Note
• http://tools.cisco.com/security/center/viewAlert.x?alertId=20682 · Vendor Advisory
• http://securityfocus.com/archive/1/511733/100/0/threaded · Note
• http://secunia.com/advisories/40103 · Note
• http://vupen.com/english/advisories/2010/1419 · Note
• http://securityfocus.com/bid/40648 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/59286 · Note