Description
TFTP server in Longshine Wireless Access Point (WAP) LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file (config.img) and other files without authentication.
References
- longshine-ap-tftp-access(10997) vdb-entry
- 20030106 Longshine WLAN Access-Point LCS-883R VU#310201 mailing-list
- 20030106 Re: Longshine WLAN Access-Point LCS-883R VU#310201 mailing-list
- 1005897 vdb-entry
- 6533 vdb-entry