Quantum Secular Labs / Blog / Advisories
CVE-2003-1346: D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory…
CVE-2003-1346 has a CVSS v2 base score of 10.0 (the maximum on that scale) and affects D Link Dwl 900ap+. Per its scoring, it can be exploited over the network, without authentication. The scored impact on confidentiality, integrity and availability is the highest available.
Vulnerability description
D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.
Severity breakdown
CVSS v2.0 10.0: AV:N/AC:L/Au:N/C:C/I:C/A:C
- Access vector: Network. Exploitable remotely over the network.
- Access complexity: Low. No special conditions are required.
- Authentication: None. No authentication is needed.
- Confidentiality impact: Complete. Total information disclosure.
- Integrity impact: Complete. Total loss of integrity.
- Availability impact: Complete. Total shutdown of the component.
Affected products
- D Link Dwl 900ap+: 2.2; 2.3; 2.5