A vulnerability has been found in A-LINK WL54AP2 (the affected version unknown) and classified as critical. Affected by this vulnerability is an unknown part of the component Management Interface. The manipulation with an unknown input leads to a cryptographic issues vulnerability. The CWE definition for the vulnerability is CWE-310. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

The management interface on the A-LINK WL54AP3 and WL54AP2 access points has a blank default password for the admin account, which makes it easier for remote attackers to obtain access.

The weakness was published 06/04/2009 as confirmed posting (Bugtraq). It is possible to read the advisory at securityfocus.com. This vulnerability is known as CVE-2008-6824 since 06/04/2009. The exploitation appears to be easy. The attack can be launched remotely. The exploitation doesn't need any form of authentication. Technical details are unknown but a public exploit is available. The attack technique deployed by this issue is T1600 according to MITRE ATT&CK.

A public exploit has been developed by Henri Lindberg and been published before and not just after the advisory. It is possible to download the exploit at exploit-db.com. It is declared as proof-of-concept. The vulnerability was handled as a non-public zero-day exploit for at least 216 days. During that time the estimated underground price was around $0-$5k.

The vulnerability is also documented in the databases at X-Force (51199) and Exploit-DB (6899). Similar entry is available at VDB-48414.

Productinfo

Vendor

• A-LINK

Name

• WL54AP2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion