JVNDB-2008-000017

Multiple I-O DATA DEVICE wireless LAN routers default configuration does not set authentication

The web administration interface for the WN-APG/R-Series and WN-WAPG/R-Series wireless LAN routers from I-O DATA DEVICE disables authentication in the default configuration.

The authentication for the web administration interface for the WN-APG/R-Series and WN-WAPG/R-Series wireless LAN routers from I-O DATA DEVICE is disabled in the default configuration. This vulnerability may allow a remote attacker to access the web administration interface without authentication.

I-O DATA DEVICE, INC.

• WN-APG/R (r) firmware version 1.05J/W and earlier
• WN-APG/R-S (r-s) firmware version 1.05J/W and earlier
• WN-WAPG/R (r) firmware version 2.04 and earlier
• WN-WAPG/R-S (r-s) firmware version 2.04 and earlier

A remote attacker could change the configuration of vulnerable routers or obtain configuration information.

[Update the Software]

Update to the latest firmware provided by the vendor.

For more information, refer to the vendor's website.

[Change the Setting]

For more information, refer to the vendor's website.

I-O DATA DEVICE, INC.

• I-O DATA : Information (Japanese)

1. JVN : JVN#13159997
2. IPA SECURITY ALERTS : Security Alert for Vulnerability in Multiple I-O DATA Wireless LAN Routers

• [2008/05/21]
    Web page published