SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be wri...
Date: 2001-07
Affected: 3com/3crwe747a, symbol/41x1_access_point
Attack vector: other
Category: vulnerability-disclosure
Severity: Medium
CVE: CVE-2001-0352
CVSS: 5 ()

SNMP agents in 3Com AirConnect AP-4111 and Symbol 41X1 Access Point allow remote attackers to obtain the WEP encryption key by reading it from a MIB when the value should be write-only, via (1) dot11WEPDefaultKeyValue in the dot11WEPDefaultKeysTable of the IEEE 802.11b MIB, or (2) ap128bWepKeyValue in the ap128bWEPKeyTable in the Symbol MIB.


Mitigations:

Architectural layers (MAESTRO):