CVE-2007-5419 - CVE House
Back to Database
Status published Critical CVE-2007-5419

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an...

Vulnerability Description

The 3Com 3CRWER100-75 router with 1.2.10ww software, when enabling an optional virtual server, configures this server to accept all source IP addresses on the external (Internet) interface unless the user selects other options, which might expose the router to unintended incoming traffic from remote attackers, as demonstrated by setting up a virtual server on port 80, which allows remote attackers to access the web management interface.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2007-5419

Credits & Attribution

No credits recorded in the NVD database.

References

More from 3com

View All →
CVE-2008-6395
The web management interface in 3Com Wireless 8760 Dual Radio...
High 7.8
CVE-2007-5420
The 3Com 3CRWER100-75 router with 1.2.10ww software, when remote management...
Low 2.6
CVE-2007-3711
Unspecified vulnerability in TOS 2.1.x, 2.2.x before 2.2.5, and 2.5.x...
High 7.5
CVE-2007-3533
The 3Com IntelliJack Switch NJ220 before 2.0.23 allows remote attackers...
Medium 5
CVE-2007-2734
The 3Com TippingPoint IPS do not properly handle certain full-width...
High 7.5

Affected Vendor

Affected Software

3crwe554g72t
Vulnerable Versions:
3crwer100-75

Timeline

Official Publish: October 12th, 2007
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.