CVEvulnerability
CVE-2005-0112
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-04-14
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs.
Affected configurations
• 3com 3crwe454g72 1.0.2
• 3com 3crwe454g72 1.0.2.11
• 3com 3crwe454g72 1.0.3.5
References
- http://secunia.com/advisories/13942 secunia.com
- http://securitytracker.com/id?1012958 securitytracker.com
- http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities Vendor Advisory
- http://www.securityfocus.com/bid/12322 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18994 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/13942 secunia.com
- http://securitytracker.com/id?1012958 securitytracker.com
- http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities Vendor Advisory
- http://www.securityfocus.com/bid/12322 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18994 exchange.xforce.ibmcloud.com