CVE-2012-1250

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 04-06-2012 07:55

Last modified: - 25-02-2022 07:40

Total changes: - 3

Description

Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.

Common Vulnerability Scoring System (CVSS)

AV:N/AC:L/Au:N/C:C/I:C/A:C

Low

Attack complexity

Network

Attack vector

High

Availability

High

Confidentiality

High

Integrity

Privileges required

Scope

User interaction

10.0

Base score

10.0

Exploitability score

Impact score

Verification logic

AND

vendor=logitech AND product=lan-w300n\/ru2_firmware AND versionEndExcluding=2.27

vendor=logitech AND product=lan-w300n\/r AND version=-

vendor=logitech AND product=lan-w300n\/rs AND version=-

vendor=logitech AND product=lan-w300n\/ru2 AND version=-

Reference

JVNDB-2012-000051-Third Party Advisory, VDB Entry
JVN#85934986-Third Party Advisory
http://www.logitec.co.jp/info/2012/0516.html
53685-Third Party Advisory, VDB Entry
49289-Broken Link

Keywords

CVE-2012-1250

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2012-1250

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures