ID

VAR-190001-0595


TITLE

H3C ER5100 Authentication Bypass Vulnerability

Trust: 0.9

sources: BID: 48384 // CNNVD: CNNVD-201106-280

DESCRIPTION

The H3C ER5100 is an enterprise-class dual-core broadband router. The H3C ER5100 Enterprise Broadband Router web management page has a verification vulnerability. Unauthorized visitors can modify, restart, and view most system configurations. The H3C ER5100 is prone to a remote authentication-bypass vulnerability. Attackers can exploit this issue to bypass the authentication mechanism and perform unauthorized actions. ---------------------------------------------------------------------- Frost & Sullivan 2011 Report: Secunia Vulnerability Research \"Frost & Sullivan believes that Secunia continues to be a major player in the vulnerability research market due to its diversity of products that provide best-in-class coverage, quality, and usability.\" This is just one of the key factors that influenced Frost & Sullivan to select Secunia over other companies. Read the report here: http://secunia.com/products/corporate/vim/fs_request_2011/ ---------------------------------------------------------------------- TITLE: H3C ER5100 Router Web Interface Authentication Bypass Vulnerability SECUNIA ADVISORY ID: SA44969 VERIFY ADVISORY: Secunia.com http://secunia.com/advisories/44969/ Customer Area (Credentials Required) https://ca.secunia.com/?page=viewadvisory&vuln_id=44969 RELEASE DATE: 2011-06-23 DISCUSS ADVISORY: http://secunia.com/advisories/44969/#comments AVAILABLE ON SITE AND IN CUSTOMER AREA: * Last Update * Popularity * Comments * Criticality Level * Impact * Where * Solution Status * Operating System / Software * CVE Reference(s) http://secunia.com/advisories/44969/ ONLY AVAILABLE IN CUSTOMER AREA: * Authentication Level * Report Reliability * Secunia PoC * Secunia Analysis * Systems Affected * Approve Distribution * Remediation Status * Secunia CVSS Score * CVSS https://ca.secunia.com/?page=viewadvisory&vuln_id=44969 ONLY AVAILABLE WITH SECUNIA CSI AND SECUNIA PSI: * AUTOMATED SCANNING http://secunia.com/vulnerability_scanning/personal/ http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/ DESCRIPTION: 128bit has reported a vulnerability in H3C ER5100 Router, which can be exploited by malicious people to bypass certain security restrictions. The vulnerability is caused due to an error in the authentication mechanism of the administrative web interface. This can be exploited to bypass authentication checks and gain access to the administrative interface by e.g. appending "userLogin.asp" to the URL. SOLUTION: Restrict access to trusted hosts only. PROVIDED AND/OR DISCOVERED BY: 128bit ORIGINAL ADVISORY: http://www.wooyun.org/bugs/wooyun-2010-02268 OTHER REFERENCES: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ DEEP LINKS: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED DESCRIPTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXTENDED SOLUTION: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ EXPLOIT: Further details available in Customer Area: http://secunia.com/vulnerability_intelligence/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help private users keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/advisories/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/advisories/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------

Trust: 0.9

sources: CNVD: CNVD-2011-2399 // BID: 48384 // PACKETSTORM: 102512

IOT TAXONOMY

category:['Network device']sub_category: -

Trust: 0.6

sources: CNVD: CNVD-2011-2399

AFFECTED PRODUCTS

vendor:3commodel:h3c er5100scope: - version: -

Trust: 0.6

vendor:3commodel:h3c er5100scope:eqversion:0

Trust: 0.3

sources: CNVD: CNVD-2011-2399 // BID: 48384

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201106-280

TYPE

permissions and access control

Trust: 0.6

sources: CNNVD: CNNVD-201106-280

EXTERNAL IDS

db:BIDid:48384

Trust: 1.5

db:WOOYUNid:WOOYUN-2010-02268

Trust: 1.0

db:CNVDid:CNVD-2011-2399

Trust: 0.6

db:CNNVDid:CNNVD-201106-280

Trust: 0.6

db:SECUNIAid:44969

Trust: 0.2

db:PACKETSTORMid:102512

Trust: 0.1

sources: CNVD: CNVD-2011-2399 // BID: 48384 // PACKETSTORM: 102512 // CNNVD: CNNVD-201106-280

REFERENCES

url:http://www.wooyun.org/bugs/wooyun-2010-02268http

Trust: 0.6

url:http://www.securityfocus.com/bid/48384

Trust: 0.6

url:http://www.wooyun.org/bugs/wooyun-2010-02268

Trust: 0.4

url:http://www.h3c.com.cn/products___technology/products/ip_network/router/er/er5100/

Trust: 0.3

url:http://secunia.com/products/corporate/vim/fs_request_2011/

Trust: 0.1

url:http://secunia.com/advisories/44969/#comments

Trust: 0.1

url:http://secunia.com/vulnerability_intelligence/

Trust: 0.1

url:http://secunia.com/advisories/secunia_security_advisories/

Trust: 0.1

url:http://secunia.com/advisories/44969/

Trust: 0.1

url:http://secunia.com/vulnerability_scanning/corporate/wsus_sccm_3rd_third_party_patching/

Trust: 0.1

url:http://secunia.com/vulnerability_scanning/personal/

Trust: 0.1

url:http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

Trust: 0.1

url:https://ca.secunia.com/?page=viewadvisory&vuln_id=44969

Trust: 0.1

url:http://secunia.com/advisories/about_secunia_advisories/

Trust: 0.1

sources: CNVD: CNVD-2011-2399 // BID: 48384 // PACKETSTORM: 102512 // CNNVD: CNNVD-201106-280

CREDITS

128bit

Trust: 0.9

sources: BID: 48384 // CNNVD: CNNVD-201106-280

SOURCES

db:CNVDid:CNVD-2011-2399
db:BIDid:48384
db:PACKETSTORMid:102512
db:CNNVDid:CNNVD-201106-280

LAST UPDATE DATE

2022-05-17T22:46:42.491000+00:00


SOURCES UPDATE DATE

db:CNVDid:CNVD-2011-2399date:2011-06-23T00:00:00
db:BIDid:48384date:2011-06-22T00:00:00
db:CNNVDid:CNNVD-201106-280date:2011-06-24T00:00:00

SOURCES RELEASE DATE

db:CNVDid:CNVD-2011-2399date:2011-06-23T00:00:00
db:BIDid:48384date:2011-06-22T00:00:00
db:PACKETSTORMid:102512date:2011-06-22T10:24:13
db:CNNVDid:CNNVD-201106-280date:1900-01-01T00:00:00