CVE-2002-0109 Information disclosure in n/a
Remote attackers can exploit default SNMP community strings to disclose sensitive information and cause denial of service on Linksys routers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-0109?
CVE-2002-0109 is a medium-severity vulnerability in n/a, published on 15 Mar 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
Which versions are affected by CVE-2002-0109?
It affects 3 products.
Products include Linksys Befn2ps4, Linksys Befsr41, Linksys Befsr81.
How do I fix CVE-2002-0109?
No fix has been published for CVE-2002-0109 yet. Limit exposure of the affected software until one is available.
Is CVE-2002-0109 being exploited?
There is no known exploitation of CVE-2002-0109 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-xgmp-mj76-c47c.