CVE-2004-1685

SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/bid/11197	Vendor Advisory
http://secunia.com/advisories/12601	Exploit Patch Vendor Advisory
http://www.osvdb.org/10088
http://marc.info/?l=bugtraq&m=109526094614160&w=2
https://exchange.xforce.ibmcloud.com/vulnerabilities/17443

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:h:smc_networks:smc7004vwbr:1.23:::::::*
	cpe:2.3:h:smc_networks:smc7008abr:1.32:::::::*
	cpe:2.3:h:smc_networks:smc7004vwbr:1.21a:::::::*
	cpe:2.3:h:smc_networks:smc7004vwbr:1.22:::::::*

Information

Published : 2004-09-14 21:00

Updated : 2017-07-10 18:31

NVD link : CVE-2004-1685

Mitre link : CVE-2004-1685

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

smc_networks

smc7008abr
smc7004vwbr

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/11197", "name": "11197", "tags": ["Vendor Advisory"], "refsource": "BID"}, {"url": "http://secunia.com/advisories/12601", "name": "12601", "tags": ["Exploit", "Patch", "Vendor Advisory"], "refsource": "SECUNIA"}, {"url": "http://www.osvdb.org/10088", "name": "10088", "tags": [], "refsource": "OSVDB"}, {"url": "http://marc.info/?l=bugtraq&m=109526094614160&w=2", "name": "20040915 SMC7004VWBR / SMC7008ABR \"spoofing\" vulnerability.", "tags": [], "refsource": "BUGTRAQ"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/17443", "name": "smc-router-security-bypass(17443)", "tags": [], "refsource": "XF"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "SMC routers SMC7004VWBR running firmware 1.00.014 and SMC7008ABR EU running firmware 1.42.003 allow remote attackers to bypass authentication by connecting to it from the same IP address as the administrator who is logged in, then accessing the setup_status.htm or status.HTM pages."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2004-1685", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "HIGH", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}}, "publishedDate": "2004-09-15T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:h:smc_networks:smc7004vwbr:1.23:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:smc_networks:smc7008abr:1.32:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:smc_networks:smc7004vwbr:1.21a:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:h:smc_networks:smc7004vwbr:1.22:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2017-07-11T01:31Z"}