Lucene search

K
cveCiscoCVE-2010-1573
HistoryJun 10, 2010 - 12:30 a.m.

CVE-2010-1573

2010-06-1000:30:07
CWE-798
cisco
web.nvd.nist.gov
25
cve-2010-1573
linksys
wap54gv3
firmware
hardcoded credentials
vulnerability
nvd
security
gemtek
remote execution
debug interface

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.056

Percentile

93.3%

Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain web pages, which allows remote attackers to execute arbitrary commands via the (1) data1, (2) data2, or (3) data3 parameters to (a) Debug_command_page.asp and (b) debug.cgi.

Affected configurations

Nvd
Node
linksyswap54g_firmwareRange3.04.03
AND
linksyswap54gMatch3
VendorProductVersionCPE
linksyswap54g_firmware*cpe:2.3:o:linksys:wap54g_firmware:*:*:*:*:*:*:*:*
linksyswap54g3cpe:2.3:h:linksys:wap54g:3:*:*:*:*:*:*:*

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.056

Percentile

93.3%

Related for CVE-2010-1573