The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management is disabled but a web server has been configured, serves a web page to external clients, which might allow remote attackers to obtain information about the routers existence and product details.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| 3crwe554g72t | 3com | 3crwer100-75 (including) | 3crwer100-75 (including) |
References
- http://osvdb.org/45490
- http://securityreason.com/securityalert/3217
- http://www.securityfocus.com/archive/1/481977/100/0/threaded
- http://www.securityfocus.com/bid/26009
- http://osvdb.org/45490
- http://securityreason.com/securityalert/3217
- http://www.securityfocus.com/archive/1/481977/100/0/threaded
- http://www.securityfocus.com/bid/26009