Detections
Analytics
Linksys Router Debug Credentials (Gemtek / gemtekswd)
critical Nessus Plugin ID 49646
Language:
Synopsis
It is possible to log on the remote device with a default password.Description
The remote Linksys device accepts hard-coded default credentials (Gemtek / gemtekswd) on a debug page.An attacker can run arbitrary commands on this device using this account.
This flaw is known to affect two firmware versions :
- Linksys WAP54Gv3 3.4.3.(US)
- Linksys WAP54Gv3 3.5.3.(Europe)
Solution
This debug account cannot be disabled. Contact the vendor and ask about a firmware upgrade.See Also
http://www.nessus.org/u?5d5ffb8d
http://www.icysilence.org/?p=268
https://tools.cisco.com/security/center/viewAlert.x?alertId=20682
http://downloads.linksysbycisco.com/downloads/wap54g_fw_ver30806.txt
Plugin Details
Severity: Critical
ID: 49646
File Name: linksys_debug_gemtek.nasl
Version: 1.15
Type: remote
Family: CISCO
Published: 9/22/2010
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/h:linksys:wap54gv3:3.05.03
Excluded KB Items: global_settings/supplied_logins_only
Exploit Ease: No known exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 6/8/2010
Reference Information
CVE: CVE-2010-1573
BID: 40648