Lucene search
HistoryNov 16, 2005 - 7:37 a.m.
CVE-2003-1264
cve-2003-1264
tftp server
longshine wap
d-link di-614+ 2.0
remote attack
wep secret
admin privileges
authentication.
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.2 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.1%
TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication.
Affected configurations
Node
d-linkdi-614\+Match2.0
ORlongshine_technologielongshine_wireless_ethernet_access_pointMatchlcs-883r-ac-b
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.2 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.1%
Related for CVE-2003-1264