Title: D-Link DWL-1000AP Wireless LAN Access Point Public Community String Vulnerability
Severity: HIGH
Description:
D-Link DWL-1000AP is a 11Mbps wireless LAN access point product, which is geared towards home users. It supports WEP, MAC address control and user authentication.
A vulnerability exists in this product which has the potential to disclose sensitive information to a remote attacker.
A default read-only SNMP community string entitled "public" exists on the device. This community string is hard-coded into the product and cannot be changed with the configuration interface.
As a result, an attacker may use a SNMP client to browse sensitive information contained in the "public" MIB.
The issue is further complicated by BugTraq ID 3735, "D-Link DWL-1000AP Wireless LAN Access Point Plaintext Password Vulnerability".
This issue has been confirmed with the 3.2.28 #483 (Aug 23
2001) firmware. Other versions of the firmware may also be affected.
Affected Products:
- D-Link DWL-1000AP Firmware 3.2.28 #483
References:
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
