Remote Access Vulnerability in Logitec LAN-W300N/R Routers
CVE-2012-1250

Currently unrated

Key Information:

Vendor

Logitech

Status
Lan-w300n\/ru2 Firmware
Vendor
CVE Published:
4 June 2012

What is CVE-2012-1250?

Logitec LAN-W300N/R routers with outdated firmware versions prior to 2.27 have a security flaw that inadequately restricts login access. This vulnerability can be exploited by remote attackers, allowing them to gain unauthorized administrative privileges. The issue centers around the handling of PPPoE (Point-to-Point Protocol over Ethernet) authentication, giving malicious entities the capacity to alter sensitive settings within the router's configuration, potentially compromising network security.

References

http://secunia.com/advisories/49289
third-party-advisoryx_refsource_SECUNIA
http://jvn.jp/en/jp/JVN85934986/index.html
third-party-advisoryx_refsource_JVN
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051
third-party-advisoryx_refsource_JVNDB

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.