CVE-2004-1596 in OfficeConnect ADSL Wireless Firewall Router

Summary

The 3COM Wireless router 3CRADSL72 running Boot Code 1.3d allows remote attackers to gain sensitive information such as passwords and router settings via a direct HTTP request to app_sta.stm.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 02/20/2005
• Disclosure: 10/13/2004
• Moderation: VulDB entry created
• Entries: 1: VDB-902
• CPE: ready
• CWE: CWE-358 (Confirmed)
• Exploit: Download
• CVSS: 7.3
• EPSS: 0.05471
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2004-1596
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2004-1596
• CVE Details: https://www.cvedetails.com/cve/CVE-2004-1596/