Virtual Access GW6110A路由器权限提升漏洞

CVE ID:CVE-2014-0343 Virtual Access GW6110A是路由器产品系列。 Virtual Access GW6110A路由器在实现上存在权限提升漏洞，可使经过身份验证的远程攻击者通过修改javascript变量，更改在Web接口上的用户访问级别，利用此漏洞提升其权限。 0 virtualaccess GW6000-adsl2-router 9.50.21 virtualaccess GW6000-adsl2-router 9.09.27 virtualaccess GW6000-adsl2-router 10.00.21 virtualaccess...

CVE-2014-0343

The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modified JavaScript variable...

Improper access control

The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modified JavaScript variable...

CVE-2014-0343

The web interface on Virtual Access GW6110A routers with software 9.00 before 9.09.27, 9.50 before 9.50.21, and 10.00 before 10.00.21 allows remote authenticated users to gain privileges via a modified JavaScript variable...