Short Name |
HTTP:MISC:RAS-CFG |
---|---|
Severity |
Warning |
Recommended |
No |
Category |
HTTP |
Keywords |
3com RAS 1500 Configuration Request |
Release Date |
2003/05/28 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
This signature detects attempts to exploit a known vulnerability in 3com SuperStack II Remote Access System (RAS) 1500. Attackers can request the 3comRAS server device configuration file, decrypt the encoded password in the configuration file, and gain elevated access.
Successful exploitation of the vulnerability in the SuperStack II RAS 1500 router could allow a remote attacker to deny service to the router, or to obtain its configuration and system image file. A firmware update is needed to eliminate this vulnerability.