3Com Wireless 8760 Dual-Radio 11a/b/g PoE - Multiple Vulnerabilities

Author: Adrian Pastor
type: remote
platform: hardware
port: 
date_added: 2008-11-19  
date_updated: 2016-12-18  
verified: 1  
codes: OSVDB-50136  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 32591.txt  
source: https://www.securityfocus.com/bid/32358/info

3Com Wireless 8760 Dual-Radio 11a/b/g PoE Access Point is prone to multiple security vulnerabilities, including an HTML-injection issue and an authentication-bypass issue.

Successfully exploiting these issues will allow an attacker to obtain administrative credentials, bypass security mechanisms, or run attacker-supplied HTML and script code in the context of the web administration interface. The attacker may then be able to steal cookie-based authentication credentials or control how the site is rendered to the user; other attacks are also possible.

snmpset -v2c -c private 192.168.1.1 sysName.0 s "PAYLOAD_GOES_HERE"