CVE-2012-1250

Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges…

published June 4, 2012

CVSS
—
EPSS
6%
Percentile
93.1
In the wild
Unconfirmed
What it is

⚠️ A router with outdated firmware could let anyone alter your network settings—like leaving your front door wide open while you’re away! 🔥 Think of it like a hotel where a guest can wander into any room because the front desk never checks IDs—everyone can access your private data without any barriers! An attacker could gain administrative access to your router and modify critical settings, which could redirect your internet traffic or cut off your connection entirely. This may lead to unauthorized access to your network, exposing sensitive devices and personal information.

Put simply

Think of it like a hotel where a guest can wander into any room because the front desk never checks IDs—everyone can access your private data without any barriers! This vulnerability allows remote attackers to exploit insufficient login restrictions on Logitec LAN-W300N/R routers running firmware before version 2.27, particularly through the PPPoE authentication process, granting them admin privileges.

What to do

An attacker could gain administrative access to your router and modify critical settings, which could redirect your internet traffic or cut off your connection entirely. This may lead to unauthorized access to your network, exposing sensitive devices and personal information. To protect your network, upgrade your router's firmware to version 2.27 or later immediately. Additionally, consider changing your default login credentials to something more secure and regularly check for firmware updates to maintain security. You’ve got this! Just follow those action items, and you’ll have your network secured in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.05801 · 93.1th percentile
Published
2012-06-04T17:00Z
EPSS history
Timeline
  • 04 JUN 17:00Z
    Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges…
    cvelistv5