CVE-2008-1543

The Advanced User Interface Pages in the ProST Web Management component on the Airspan WiMAX ProST have a certain default User ID and password, which makes it easier for remote attackers to obtain partial administrative access, a different vulnerability than CVE-2008-1262...

CVE-2008-1542

CVE-2008-1542 refers to Airspan Base Station Distribution Unit (BSDU) that uses a root password of "topsecret", enabling remote attackers to gain administrative access over Telnet. The entry describes a default-authentication weakness that allows an attacker to obtain administrative rights, repre...

AirSpan Base Station Distribution Unit default root password

Overview AirSpan Base Station Distribution Units may contain an undocumented telnet server that authenticates via a known password and is enabled by default. Description From the AirSpan MicroMax product page:The base station is highly modular in design and is composed of two main components: the...

airspan-bypass.txt

Topic: Airspan ProST Modem Management Authentication Bypass Vulnerability Announced: 2008-03-13 Product: Airspan ProST Antenna Vendor: http://www.airspan.com/ Impact: Remote shell access Affected product: Airspan ProST with firmware 6.5.40.0, Hardware rev 4.1 Credits: Francis Lacoste-Cordeau I...

CVE-2008-1262

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

Authentication flaw

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

CVE-2008-1262

The CVE-2008-1262 entry concerns the Airspan WiMax ProST 4.1 antenna running software 6.5.38.0, where the administration panel does not verify authentication credentials. This authentication flaw enables remote attackers to perform at least two actions: (1) upload malformed firmware, and (2) bind...

CVE-2008-1262

The administration panel on the Airspan WiMax ProST 4.1 antenna with 6.5.38.0 software does not verify authentication credentials, which allows remote attackers to 1 upload malformed firmware or 2 bind the antenna to a different WiMAX base station via unspecified requests to forms under processad...

Airspan ProST WiMAX Device Web接口验证绕过漏洞

BUGTRAQ ID: 28122 CNCAN ID:CNCAN-2008030701 Airspan的WiMAX基站和终端用户设备AS.MAX家族包括对住宅和移动因特网接入、企业数据网络和语音IP的支持。 Airspan ProST WiMAX设备存在验证绕过问题，远程攻击者可以利用漏洞未授权访问受此漏洞影响设备，修改任何配置。 目前没有详细漏洞细节提供。 Airspan ProST 目前没有解决方案提供，不过可限制80/tcp端口的过滤来降低威胁： http://www.airspan.com/productswimaxcustpremProST.aspx...

Airspan ProST WiMAX Device - Web Interface Authentication Bypass

Airspan ProST WiMAX Device - Web Interface Authentication Bypass source: https://www.securityfocus.com/bid/28122/info Airspan ProST WiMAX device is prone to an authentication-bypass vulnerability because it fails to perform adequate authentication checks in the web interface. An attacker can...

Airspan ProST WiMAX Device - Web Interface Authentication Bypass

source: https://www.securityfocus.com/bid/28122/info Airspan ProST WiMAX device is prone to an authentication-bypass vulnerability because it fails to perform adequate authentication checks in the web interface. An attacker can exploit this issue to gain unauthorized access to the affected device...

AirSpan WiMAX ProST web management interface authentication bypass vulnerability

Overview The AirSpan WiMAX ProST contains an authentication bypass vulnerability that could allow an unauthenticated, remote attacker to make arbitrary configuration changes. Description The AirSpan WiMAX ProST is customer premise equipment that provides WiMAX wireless networking. The web...