CVE-2008-0229

The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows…

published January 10, 2008

CVSS
—
EPSS
3%
Percentile
84.9
In the wild
Unconfirmed
What it is

⚠️ Authentication? What’s that? In the LevelOne WBR-3460 router, attackers can waltz in uninvited and snag full administrative access, all without breaking a sweat! 🔑 This is like leaving the back door of a café wide open; anyone on the street can stroll in and start rearranging furniture, brewing espresso, or even reading customer data—totally unchecked. 🚪☕ An attacker on the local network could easily gain complete control of the router, allowing them to intercept traffic, change settings, or even snoop on connected devices. It’s a wide-open gateway to all sorts of mischief!

Put simply

This is like leaving the back door of a café wide open; anyone on the street can stroll in and start rearranging furniture, brewing espresso, or even reading customer data—totally unchecked. 🚪☕ This vulnerability arises from the telnet service on the LevelOne WBR-3460 not requiring any authentication, effectively allowing anyone connected to the network to access the router's administrative interface.

What to do

An attacker on the local network could easily gain complete control of the router, allowing them to intercept traffic, change settings, or even snoop on connected devices. It’s a wide-open gateway to all sorts of mischief! To protect your network, disable telnet access on the router and switch to more secure remote access methods, like SSH. If you haven't already, consider updating the firmware and reviewing connected devices for any unauthorized changes. You’ve got this! Follow these steps, and you’ll be a security hero in no time! 🦸‍♂️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02565 · 84.9th percentile
Published
2008-01-10T23:00Z
EPSS history
Timeline
  • 10 JAN 23:00Z
    The telnet service in LevelOne WBR-3460 4-Port ADSL 2/2+ Wireless Modem Router with firmware 1.00.11 and 1.00.12 does not require authentication, which allows…
    cvelistv5