5 matches found
ELSA Lancom information leak
Administrative password can be obtained by remote user in cleartextwith Web interface...
[Full-disclosure] ELSA Lancom Router Discloses the Administrator Password to Remote Users
It is reported that the default configuration allows a remote user to connect to the router via port 80 with a web browser and obtain the remote access password, which is apparently stored in clear text. The remote user can also change the router's configuration and can remotely upgrade the...
CVE-2001-1223
The CVE-2001-1223 entry concerns the web administration server of ELSA Lancom 1100 Office. The vulnerability is that the web admin interface does not require authentication, allowing arbitrary remote attackers to gain administrative privileges by connecting to the server (network exposure). The a...