CVE-2005-0112

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2005-04-14 · updated 2026-06-16

Description

The web-based administrative interface for 3Com OfficeConnect Wireless 11g Access Point (AP) 1.00.08, and possibly earlier versions before 1.03.07A, allows remote attackers to bypass authentication and obtain sensitive information by directly accessing the (1) config.bin (2) profile.wlp?PN=ggg or (3) event.logs URLs.

Affected products

3Com 3Crwe454G72: 1.0.2, 1.0.2.11, 1.0.3.5

References

http://secunia.com/advisories/13942
http://securitytracker.com/id?1012958
http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities
http://www.securityfocus.com/bid/12322
https://exchange.xforce.ibmcloud.com/vulnerabilities/18994
http://secunia.com/advisories/13942
http://securitytracker.com/id?1012958
http://www.idefense.com/application/poi/display?id=188&type=vulnerabilities
http://www.securityfocus.com/bid/12322
https://exchange.xforce.ibmcloud.com/vulnerabilities/18994

Get alerted when CVE-2005-0112 or the next vulnerability affects your stack