Test Kennung:	1.3.6.1.4.1.25623.1.0.803193
Kategorie:	Default Accounts
Titel:	Sitecom WLM-3500 Backdoor Accounts (HTTP)
Zusammenfassung:	Sitecom WLM-3500 routers contain an undocumented access; backdoor.
Beschreibung:	Summary: Sitecom WLM-3500 routers contain an undocumented access backdoor. Vulnerability Insight: These hard-coded accounts are persistently stored inside the device firmware image. Despite these users cannot access all the pages of the web interface, they can still access page '/romfile.cfg', the (clear-text) configuration file of the device that contains, among the other things, also the password for the 'admin' user. Thus, escalating to administrative privileges is trivial. Vulnerability Impact: Successful exploitation will let the remote attacker to access the web interface of the affected devices using two distinct hard-coded users. Affected Software/OS: Sitecom WLM-3500 devices with firmware versions prior to 1.07. Solution: Update to firmware version 1.07 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.