Lucene search

MitreCVE-2007-5419

HistoryOct 12, 2007 - 9:17 p.m.

CVE-2007-5419

2007-10-1221:17:00

CWE-16

mitre

web.nvd.nist.gov

3com

3crwer100-75 router

router security

vulnerability

remote attackers

virtual server

nvd

cve-2007-5419

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless the user selects other options, which might expose the router to unintended incoming traffic from remote attackers, as demonstrated by setting up a virtual server on port 80, which allows remote attackers to access the web management interface.

Affected configurations

Nvd

Node

3com3crwe554g72tMatch3crwer100-751.2.10ww

VendorProductVersionCPE
3com3crwe554g72t3crwer100-75cpe:2.3:h:3com:3crwe554g72t:3crwer100-75:*:1.2.10ww:*:*:*:*:*

Vendor	Product	Version	CPE
3com	3crwe554g72t	3crwer100-75	cpe:2.3:h:3com:3crwe554g72t:3crwer100-75::1.2.10ww:::::

References

osvdb.org/43657

securityreason.com/securityalert/3217

www.securityfocus.com/archive/1/481977/100/0/threaded

www.securityfocus.com/bid/26009

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.7

Confidence

Low

EPSS

0.011

Percentile

84.7%

JSON

Related for CVE-2007-5419