pagvac has reported two security issues in BT Voyager 2091 Wireless, which can be exploited by malicious people to disclose potentially sensitive information.

The problem is caused due to missing authentication checks when accessing the "psiBackupInfo" and "connect.html" files. This can be exploited to disclose certain configuration information and PPP user credentials.

The security issues have been reported in firmware versions 2.21.05.08m_A2pB018c1.d16d and 3.01m. Other versions may also be affected.

Solution
Filter traffic to affected devices.

Provided and/or discovered by
pagvac

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://ikwt.dyndns.org/projects/btvoyager-getconfig.txt

Deep Links
Links available to Secunia VIM customers