Albert Puigsech Galicia has reported a vulnerability in U.S. Robotics Wireless Access Point 8054 Series, allowing malicious people to cause a Denial of Service.

The problem is that the device fails to handle an overly long HTTP GET request sent to the administrative web interface. This causes the device to crash and disconnect users.

The vulnerability has been reported in firmware version 1.21h. Other versions may also be affected.

Solution
Restrict access to the administrative interface.

Provided and/or discovered by
Albert Puigsech Galicia

Changelog
Further details available in Customer Area

Original Advisory
http://www.7a69ezine.org/node/view/114

Deep Links
Links available in Customer Area