ECI Telecom B-Focus ADSL2+ Combo332+ Wireless Router - Information Disclosure

Author: LegendaryZion
type: remote
platform: hardware
port: 
date_added: 2006-10-31  
date_updated: 2013-10-12  
verified: 1  
codes: CVE-2006-5711;OSVDB-30193  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 28888.txt  
source: https://www.securityfocus.com/bid/20834/info

ECI Telecom's B-FOCuS ADSL2+ Combo332+ wireless router is prone to an information-disclosure vulnerability. The router's Web-Based Management interface fails to authenticate users before providing access to sensitive information.

Exploiting this issue may allow an unauthenticated remote attacker to retrieve sensitive information from the affected device, which may aid in further attacks.

http://www.example.com/html/defs/