CVE-2004-1685

SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=109526094614160&w=2
http://secunia.com/advisories/12601	Exploit Patch Vendor Advisory
http://www.osvdb.org/10088
http://www.securityfocus.com/bid/11197	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/17443

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:smc_networks:smc7004vwbr:1.21a:::::::*
	cpe:2.3:h:smc_networks:smc7004vwbr:1.22:::::::*
	cpe:2.3:h:smc_networks:smc7004vwbr:1.23:::::::*
	cpe:2.3:h:smc_networks:smc7008abr:1.32:::::::*

History

No history.

Information

Published : 2004-09-15 04:00

Updated : 2024-02-04 16:31

NVD link : CVE-2004-1685

Mitre link : CVE-2004-1685

CVE.ORG link : CVE-2004-1685

JSON object : View

Products Affected

smc_networks

smc7008abr
smc7004vwbr

CWE

NVD-CWE-Other

{"id": "CVE-2004-1685", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-09-15T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=109526094614160&w=2", "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/12601", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/10088", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/11197", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17443", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages."}], "lastModified": "2017-07-11T01:31:15.497", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:smc_networks:smc7004vwbr:1.21a:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2C548507-4D36-4306-9F63-93CAC1B6922D"}, {"criteria": "cpe:2.3:h:smc_networks:smc7004vwbr:1.22:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2DEB5C35-39F4-41A4-BDD3-634F1EE530A4"}, {"criteria": "cpe:2.3:h:smc_networks:smc7004vwbr:1.23:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8205F896-AE0D-451F-883C-4AC8116C66D6"}, {"criteria": "cpe:2.3:h:smc_networks:smc7008abr:1.32:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C227D3AD-A691-43AD-9587-CE4E19C7B2D6"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}