First published: Fri Oct 12 2007(Updated: )
The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless the user selects other options, which might expose the router to unintended incoming traffic from remote attackers, as demonstrated by setting up a virtual server on port 80, which allows remote attackers to access the web management interface.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
3Com 3CRWE554G72T | =3crwer100-75 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of CVE-2007-5419 is considered high due to its potential to expose the router to unintended incoming traffic.
To fix CVE-2007-5419, you should disable the virtual server option or configure it to only accept traffic from specific source IP addresses.
CVE-2007-5419 affects the 3Com 3CRWER100-75 router running version 1.2.10ww software.
The risks associated with CVE-2007-5419 include unauthorized access to the router and potential network vulnerabilities due to open incoming traffic.
Yes, CVE-2007-5419 is easily exploitable due to the default configuration allowing all incoming traffic through the virtual server.