iDEFENSE has reported two vulnerabilities in 3Com OfficeConnect Remote 812 ADSL Router, which can be exploited by malicious people to cause a DoS (Denial of Service) or gain access to it.

1) An error within the handling of Telnet traffic can be exploited to make the device reboot or stop handling packets by sending a long string containing Telnet escape sequences to the telnet port.

2) An authentication error within the administrative web-interface can be exploited to bypass the user authentication by making multiple login attempts. Successful exploitation grants administrative privileges on the device.

The vulnerabilities have been reported in firmware release 1.1.9.4. Other versions may also be affected.

Solution
Restrict access to administrative services.

Provided and/or discovered by
Discovered by: Rafel Ivgi.
Reported by: iDEFENSE.

Changelog
Further details available in Customer Area

Original Advisory
http://www.idefense.com/application/poi/display?id=105&type=vulnerabilities
http://www.idefense.com/application/poi/display?id=106&type=vulnerabilities

Deep Links
Links available in Customer Area