cgi-bin/reboot.cgi on Seowon Intech SWC-9100 routers allows remote attackers to (1) cause a denial of service (reboot) via a default_reboot action or (2) reset all configuration values via a factory_default action.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://secunia.com/advisories/56756 | third party advisory |
http://www.kb.cert.org/vuls/id/431726 | third party advisory us government resource |
http://osvdb.org/102817 | vdb entry |