Description
Linksys WAP55AG 1.07 allows remote attackers with access to an SNMP read only community string to gain access to read/write communtiy strings via a query for OID 1.3.6.1.4.1.3955.2.1.13.1.2.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Linksys WAP55AG 1.0.7 - SNMP Community String Insecure Configuration EDB-23721 · remote · Feb 18, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20040219 Re: SNMP community string disclosure in Linksys WAP55AG mailing-list
- 20040217 SNMP community string disclosure in Linksys WAP55AG mailing-list
- linksys-snmp-strings-disclosure(15257) vdb-entry
- 9688 vdb-entry