Vulnerability in Ip3 Networks Netaccess

CVE-2004-2326

SQL injection vulnerability in IP3 Networks NetAccess Appliance before firmware 3.1.18b13 allows remote attackers to bypass authentication via the (1) login or (2) password. NOTE: this issue was later reported to also affect firmware 4.0.34.

EPSS: 0.014 (68.9th percentile) — read the EPSS interpretation.

Affected products

Ip3_networks Ip3_netaccess
Ip3_networks Ip3_netaccess_-_hospitality
Ip3_networks Ip3_netaccess_-_wireless_hotspots
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)