Two vulnerabilities have been reported in SMC SMCD3G-CCR, which can be exploited by malicious people to conduct brute force and cross-site request forgery attacks.

1) The web management application generates session identifiers incrementally, which can be exploited to brute force a valid session identifier via the "userid" cookie.

2) The web management application allows users to perform certain actions via HTTP requests without making proper validity checks to verify the requests. This can be exploited to e.g. enable management via Telnet by tricking an administrator into visiting a malicious web site while being logged-in to the application.

Solution
Reportedly fixed in firmware version 1.4.0.49.2.

Provided and/or discovered by
Zack Fasel and Matthew Jakubowski, Trustwave's SpiderLabs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Trustwave's SpiderLabs (TWSL2011-002):
https://www.trustwave.com/spiderlabs/advisories/TWSL2011-002.txt

Deep Links
Links available to Secunia VIM customers