Unscored severity · published Jun 4, 2012
CVE-2012-1250
Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings…
–
CVSS
5.8%
EPSS
No
On KEV
Description
Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.8% · higher than 93% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LF
Lan-w300n/ru2 Firmware · Logitech
before 2.27 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-1250
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-1250
Third Party Advisory
http://jvn.jp/en/jp/JVN85934986/index.html
Third Party Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051
Broken Link
http://secunia.com/advisories/49289
Vendor Advisory
http://www.logitec.co.jp/info/2012/0516.html
Third Party Advisory
http://www.securityfocus.com/bid/53685