Belkin F5D6130 Wireless Network Access Point SNMP Request Denial Of Service Vulnerability

Just picked one of these AP's up the other day and during a quick fiddle noticed a remote DoS. It is possible to disable the Belkin F5D6130 802.11b AP by issuing a small number of SNMP GetNextRequest requests to the AP. The attack results in the AP dropping all wireless connections and ceasing to...

Belkin F5D6130 Wireless Network Access Point - SNMP Request Denial of Service

Belkin F5D6130 Wireless Network Access Point - SNMP Request Denial of Service source: https://www.securityfocus.com/bid/5571/info A denial of service vulnerability has been reported in the Belkin F5D6130 Wireless Network Access Point. Reportedly, this issue may be exploited by making a sequence o...

Belkin F5D6130 DoS

Number of SNMP GetNext Request packets causes AP to crash...

Phenoelit Advisory 0815 ++ // Xedia

Phenoelit Advisory wir-haben-auch-mal-was-gefunden 0815 +++ Authors FX [email protected] kim0 [email protected] Phenoelit Group http://www.phenoelit.de Advisory http://www.phenoelit.de/stuff/LucentXedia.txt Affected Products Lucent Access Point IP Services Router Formerly known as Xedia Router Luce...

CVE-2002-0396

The web management server for Red-M 1050 Bluetooth Access Point does not use session-based credentials to authenticate users, which allows attackers to connect to the server from the same IP address as a user who has already established a session...

CVE-2002-0395

The TFTP server for Red-M 1050 Bluetooth Access Point can not be disabled and makes it easier for remote attackers to crack the administration password via brute force methods...

CVE-2002-0398

Red-M 1050 Bluetooth Access Point PPP server allows bonded users to cause a denial of service and possibly execute arbitrary code via a long user name...

CVE-2002-0397

Red-M 1050 Bluetooth Access Point publicizes its name, IP address, and other information in UDP packets to a broadcast address, which allows any system on the network to obtain potentially sensitive information about the Access Point device by monitoring UDP port 8887...

CVE-2002-0393

Buffer overflow in Red-M 1050 Bluetooth Access Point management web interface allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long administration password...

CVE-2002-0394

Red-M 1050 Bluetooth Access Point uses case insensitive passwords, which makes it easier for attackers to conduct a brute force guessing attack due to the smaller space of possible passwords...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

@stake advisory: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 @stake, Inc. www.atstake.com Security Advisory Advisory Name: Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities Issues: Red-M 1050 Access Point Management Web Server DoS Red-M 1050 Access Point Case Insensitive Passwords Red-M 1050 Access...

Wireless Access Point Detection

Nessus has determined that the remote host is a wireless access point AP. Ensure that proper physical and logical controls are in place for its use. A misconfigured access point may allow an attacker to gain access to an internal network without being physically present on the premises. If the...

[NEWS] Multiple Red-M 1050 Blue Tooth Access Point Vulnerabilities

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion When was the last time you checked your server's security? How about a monthly report? http://www.AutomatedScanning.com - Know that you're...

Cisco Aironet Telnet Invalid Username/Password DoS

The remote host appears to be a Cisco Aironet wireless access point. It was possible to reboot the AP by connecting via telnet and and providing a specially crafted username and password. A remote attacker could do this repeatedly to disable the device. %NASLMINLEVEL 70300 C Tenable Network...

AirConnect Default Password

This AirConnect wireless access point still has the default password set for the web interface. This could be abused by an attacker to gain full control over the wireless network settings. This script was written by H D Moore Information about the AP provided by Brian Caswell Chnages by Tenable :...

CVE-2001-1220

D-Link DWL-1000AP Firmware 3.2.28 483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base MIB, which allows remote attackers to gain administrative privileges...

CVE-2001-0514

SNMP service in Atmel 802.11b VNET-B Access Point 1.3 and earlier, as used in Netgear ME102 and Linksys WAP11, accepts arbitrary community strings with requested MIB modifications, which allows remote attackers to obtain sensitive information such as WEP keys, cause a denial of service, or gain...

CVE-2001-0888

Atmel Firmware 1.3 Wireless Access Point WAP allows remote attackers to cause a denial of service via a SNMP request with 1 a community string other than "public" or 2 an unknown OID, which causes the WAP to deny subsequent SNMP requests...

CVE-2001-0352

CVE-2001-0352 affects 3Com AirConnect AP-4111 and Symbol 41X1 APs. The vulnerability arises from SNMP queries that read WEP keys from the IEEE 802.11b MIB (dot11WEPDefaultKeyValue in dot11WEPDefaultKeysTable) or the Symbol MIB (ap128bWepKeyValue), where keys should be write-only. This permits rem...