← back
CVE-2006-3561

CVE-2006-3561

EPSS 6.6%
BT Voyager 2091 Wireless firmware 2.21.05.08m_A2pB018c1.d16d and earlier, and 3.01m and earlier, allow remote attackers to bypass the authentication process and gain sensitive information, such as configuration information via (1) /btvoyager_getconfig.sh, PPP credentials via (2) btvoyager_getpppcreds.sh, and decode configuration credentials via (3) btvoyager_decoder.c.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/2034unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://ikwt.dyndns.org/projects/btvoyager-getconfig.txthttp://lists.grok.org.uk/pipermail/full-disclosure/2006-July/047733.htmlhttp://secunia.com/advisories/20982https://exchange.xforce.ibmcloud.com/vulnerabilities/27652http://www.gnucitizen.org/blog/holes-in-embedded-devices-authentication-bypass-pt-3/http://www.gnucitizen.org/projects/router-hacking-challenge/http://www.securityfocus.com/archive/1/440405/100/0/threadedhttp://www.securityfocus.com/archive/1/489009/100/0/threadedhttp://www.securityfocus.com/bid/19057http://www.vupen.com/english/advisories/2006/2734