PT-2012-3167
CVE-2012-1250
·
Published
2012-06-04
·
Updated
2022-02-25
Description by
CVSS 2.0
10
HighMetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions
Logitec LAN-W300N/R routers versions prior to 2.27
Description
The issue concerns improper restriction of login access, allowing remote attackers to gain administrative privileges and modify settings. This is related to vectors involving PPPoE authentication.
Recommendations
For versions prior to 2.27, update the firmware to version 2.27 or later to resolve the issue. As a temporary workaround, consider restricting access to the router's administrative interface until the firmware can be updated.
Found an issue in the description? Have something to add? Feel free to write us 👾