Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass
| Reporter | Title | Published | Views | Family All 13 |
|---|---|---|---|---|
 | CVE-2013-5030 | 16 Oct 201310:00 | – | cve |
 | CVE-2013-5030 | 16 Oct 201310:00 | – | cvelist |
 | Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass | 19 Nov 201300:00 | – | exploitdb |
 | EUVD-2013-4872 | 7 Oct 202500:30 | – | euvd |
 | Ruckus Wireless Zoneflex 2942 Wireless Access Point - Authentication Bypass | 19 Nov 201300:00 | – | exploitpack |
 | CVE-2013-5030 | 16 Oct 201310:52 | – | nvd |
 | Ruckus Wireless Zoneflex 2942 Authentication Bypass | 20 Nov 201300:00 | – | packetstorm |
 | Authentication flaw | 16 Oct 201310:52 | – | prion |
 | CVE-2013-5030: Undefined Security Weakness | 16 Oct 201300:00 | – | rapid7 |
 | CVE-2013-5030 | 22 May 202502:46 | – | redhatcve |
10
Exploit Title: Ruckus Wireless Zoneflex 2942 Wireless Access Point vulnerable to authentication bypass
Date: 10/10/2013
Exploit Author: myexploit
Vendor Homepage: http://www.ruckuswireless.com/
Version: 2942 Wireless Access Point version 9.6.0.0.267
CVE : CVE-2013-5030
Video to show the exploit
http://www.youtube.com/watch?v=KAAQZZs4_n4
Overview
Ruckus Wireless Zoneflex 2942 Wireless Access Point version 9.6.0.0.267 and possibly earlier versions contains an authentication bypass vulnerability (CWE-592).
Description
CWE-592: Authentication Bypass Issues
Ruckus Wireless Zoneflex 2942 Wireless Access Point version 9.6.0.0.267 contains an authentication bypass vulnerability. A local unauthenticated attacker may attempt to login with any credentials and after receiving the authentication failure message, the user can remove the /login.asp portion of the URI to bypass the login page. The attacker will not be able to browse to the other configuration pages of the device via the graphical user interface, but they can then manually edit the URI to gain access to the following pages:
/configuration/wireless.asp
/configuration/local_network.asp
/configuration/internet.asp
/configuration/device.asp
/maintenance/upgrade.asp
/maintenance/reboot.asp
Impact
An unauthenticated attacker may be able to directly access the device's configuration web pages. The attacker may also be able to reboot the access point, resulting in a denial of service.
Solution
We are currently unaware of a practical solution to this problem. Please consider the following workarounds.
# 0day.today [2018-01-03] #Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
20 Nov 2013 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.02037