CVE-2012-1250

Опубликовано: 04 июн. 2012

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.

Ссылки

http://jvn.jp/en/jp/JVN85934986/index.html
Third Party Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051
Third Party Advisory
VDB Entry
http://secunia.com/advisories/49289
Broken Link
http://www.logitec.co.jp/info/2012/0516.html
Vendor Advisory
http://www.securityfocus.com/bid/53685
Third Party Advisory
VDB Entry
http://jvn.jp/en/jp/JVN85934986/index.html
Third Party Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051
Third Party Advisory
VDB Entry
http://secunia.com/advisories/49289
Broken Link
http://www.logitec.co.jp/info/2012/0516.html
Vendor Advisory
http://www.securityfocus.com/bid/53685
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:a:logitech:lan-w300n\/ru2_firmware:*:*:*:*:*:*:*:*

Версия до 2.27 (исключая)

Одно из

cpe:2.3:h:logitech:lan-w300n\/r:-:*:*:*:*:*:*:*

cpe:2.3:h:logitech:lan-w300n\/rs:-:*:*:*:*:*:*:*

cpe:2.3:h:logitech:lan-w300n\/ru2:-:*:*:*:*:*:*:*

EPSS

Процентиль: 92%

0.07475

Низкий

10 Critical

CVSS2

Дефекты

CWE-264

Связанные уязвимости

GHSA-5cjf-4rgx-6p2w

github

больше 3 лет назад