Description (CNA)
Successful exploitation of the vulnerability could allow an unauthenticated attacker to obtain a valid session ID with administrator privileges by spoofing the login request, potentially allowing the attacker to modify the behaviour of the access point.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Alcatel-Lucent / OmniAccess Stellar Products | affected AP1100 AWOS versions 5.0.2 GA and earlier; affected AP1200 AWOS versions 5.0.2 GA and earlier; affected AP1300 AWOS versions 5.0.2 GA and earlier; affected AP1400 AWOS versions 5.0.2 GA and earlier; affected AP1500 AWOS versions 5.0.2 GA and earlier |
CWE
CWE-384
References
- https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2025-072/
- https://www.al-enterprise.com/-/media/assets/internet/documents/sa-n0150-omniaccess-stellar-multiple-vulnerabilities.pdf
- https://blog.uhg.sg/article/24.html
ADP enrichment
No English description supplied.