Lucene search

K
jvnJapan Vulnerability NotesJVN:85934986
HistoryMay 25, 2012 - 12:00 a.m.

JVN#85934986: Logitec LAN-W300N/R series fails to restrict access permissions

2012-05-2500:00:00
Japan Vulnerability Notes
jvn.jp
19

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.9%

The LAN-W300N/R series are wireless LAN routers. Logitec LAN-W300N/R series contain an issue where access permissions are not restricted.

Impact

An attacker that can access the product may log in with administrative privileges. As a result, settings may be changed or altered by the attacker who logged in to LAN-W300N/R.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

  • LAN-W300N/R firmware version 2.17

For more information, refer to the developer’s website.

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.01 Low

EPSS

Percentile

83.9%

Related for JVN:85934986