Auth bypass in Smc Smc8024l2 Switch
CVE-2012-2974
The web interface on the SMC SMC8024L2 switch allows remote attackers to bypass authentication and obtain administrative access via a direct request to a .html file under (1) status/, (2) system/, (3) ports/, (4) trunks/, (5) vlans/, (6) qos/, (7) rstp/, (8) dot1x/, (9) security/, (10) igmps/, or (11) snmp/.
Vulnerability class: Broken Authentication
EPSS: 0.026 (83.9th percentile) — read the EPSS interpretation.
Affected products
- Smc Smc8024l2_switch
- N/a — versions n/a
Weakness classification (CWE)
References
- cret@cert.org (vdb-entry, x_refsource_SECTRACK)
- cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)