CVE-2003-1346: Critical severity D-Link Dwl-900ap\+ vulnerability
D-Link wireless access point DWL-900AP+ 2.2, 2.3 and possibly 2.5 allows remote attackers to set factory default settings by upgrading the firmware using AirPlus Access Point Manager.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Prevent firmware upgrades of D-Link DWL-900AP+ via the AirPlus Access Point Manager: block or deny AirPlus Access Point Manager hosts/applications from reaching DWL-900AP+ devices at the network level (firewall, ACL, or host-based firewall) to stop remote firmware upgrade attempts that can reset the device to factory defaults.
- Compensating control
Isolate or restrict management access to any D-Link DWL-900AP+ running firmware 2.2 or 2.3 (and possibly 2.5): place these devices on a protected management VLAN or network, and limit management interfaces to trusted administrator IPs only until an official fix or patched firmware is available.
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1346?
CVE-2003-1346 is considered a moderately severe vulnerability due to its potential to allow unauthorized access and the manipulation of device settings.
How do I fix CVE-2003-1346?
To fix CVE-2003-1346, it is recommended to upgrade the firmware of the D-Link DWL-900AP+ to a version that addresses this vulnerability.
What are the affected versions in CVE-2003-1346?
CVE-2003-1346 affects versions 2.2, 2.3, and possibly 2.5 of the D-Link DWL-900AP+.
What type of attack does CVE-2003-1346 represent?
CVE-2003-1346 represents a remote attack that can manipulate the wireless access point's firmware settings.
Is CVE-2003-1346 specific to any vendor?
Yes, CVE-2003-1346 specifically affects D-Link wireless access point devices, particularly the DWL-900AP+.