Lucene search
HistoryJun 04, 2012 - 5:55 p.m.
CVE-2012-1250
logitec
lan-w300n/r
routers
firmware
security vulnerability
remote access
admin privileges
pppoe authentication
cve-2012-1250
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.9%
Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.
Affected configurations
Node
logitechlan-w300n\/ru2_firmwareRange<2.27
logitechlan-w300n\/rMatch-
ORlogitechlan-w300n\/rsMatch-
ORlogitechlan-w300n\/ru2Match-
| CPE | Name | Operator | Version |
|---|---|---|---|
| logitech:lan-w300n\/ru2_firmware | logitech lan-w300n/ru2 firmware | lt | 2.27 |
Related
cvelist
cvelist
CVE-2012-1250
2012-06-04 17:00:00
jvn
jvn
prion
prion
Authentication flaw
2012-06-04 17:55:00
nvd
nvd
CVE-2012-1250
2012-06-04 17:55:01
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
6.9 Medium
AI Score
Confidence
Low
0.01 Low
EPSS
Percentile
83.9%
Related for CVE-2012-1250