CVE-2005-3253
Last modified
CVE-2005-3253 is a vulnerability of currently unknown severity. Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass authentication.. EPSS estimates a 1.80% chance of exploitation in the next 30 days.
Description
Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass authentication.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Avaya | Wireless Ap-3 | 2.5 |
| Avaya | Wireless Ap-3 | 2.5.4 |
| Avaya | Wireless Ap-4 | 2.5 |
| Avaya | Wireless Ap-4 | 2.5.4 |
| Avaya | Wireless Ap-5 | 2.5 |
| Avaya | Wireless Ap-5 | 2.5.4 |
| Avaya | Wireless Ap-6 | 2.5 |
| Avaya | Wireless Ap-6 | 2.5.4 |
| Avaya | Wireless Ap-7 | 2.5 |
| Avaya | Wireless Ap-8 | 2.5 |
| Proxim | Ap-2000 | 2.5.4 |
| Proxim | Ap-4000 | 2.4.12 |
| Proxim | Ap-4000 | 3.0 |
| Proxim | Ap-600 | 2.5.4 |
| Proxim | Ap-700 | 2.4.12 |
| Proxim | Ap-700 | 3.0 |
References
- http://secunia.com/advisories/18047Patch, Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-233.pdfPatch, Vendor Advisory
- http://secunia.com/advisories/18047Patch, Vendor Advisory
- http://support.avaya.com/elmodocs2/security/ASA-2005-233.pdfPatch, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2005-3253?
How severe is CVE-2005-3253?
How do I fix CVE-2005-3253?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2005
- CVE-2005-3247The SigComp UDVM in Ethereal 0.10.12 allows remote attackers…
- CVE-2005-3248Unspecified vulnerability in the X11 dissector in Ethereal 0…
- CVE-2005-3249Unspecified vulnerability in the WSP dissector in Ethereal 0…
- CVE-2005-3250Unknown vulnerability in Solaris 10 allows local users to ca…
- CVE-2005-3251Directory traversal vulnerability in the gallery script in G…
- CVE-2005-3252Stack-based buffer overflow in the Back Orifice (BO) preproc…
- CVE-2005-3254The CGIwrap program before 3.9 on Debian GNU/Linux uses an i…
- CVE-2005-3255The (1) cgiwrap and (2) php-cgiwrap packages before 3.9 in D…
- CVE-2005-3256The key selection dialogue in Enigmail before 0.92.1 can inc…
- CVE-2005-3257The VT implementation (vt_ioctl.c) in Linux kernel 2.6.12, a…
- CVE-2005-3258The rfc1738_do_escape function in ftp.c for Squid 2.5 STABLE…
- CVE-2005-3259Multiple SQL injection vulnerabilities in versatileBulletinB…
Are you affected by CVE-2005-3253?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
