CVE-2001-1220: Critical severity D-Link DWL-1000AP vulnerability

Published Dec 21, 2001

Updated

D-Link DWL-1000AP Firmware 3.2.28 #483 Wireless LAN Access Point stores the administrative password in plaintext in the default Management Information Base (MIB), which allows remote attackers to gain administrative privileges.

Affected Software

1 affected component

D-Link DWL-1000AP=3.2.28_483

Event History

Dec 21, 2001

CVE Published

05:00 AM

Mar 15, 2002

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-1220?

CVE-2001-1220 is considered a high severity vulnerability due to the exposure of administrative password information.

How do I fix CVE-2001-1220?

To fix CVE-2001-1220, update the D-Link DWL-1000AP to a version that does not store passwords in plaintext.

What are the potential consequences of CVE-2001-1220?

The potential consequences of CVE-2001-1220 include unauthorized remote access to the device and potential control over the network.

Which devices are affected by CVE-2001-1220?

CVE-2001-1220 affects the D-Link DWL-1000AP with firmware version 3.2.28 #483.

Is my network safe if I use the D-Link DWL-1000AP with the vulnerable firmware?

Your network is at risk if you use the D-Link DWL-1000AP with the vulnerable firmware version, as attackers could exploit the plaintext password storage.