CVE-2012-1250

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 5.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-06-04 · updated 2026-06-16
Weakness: CWE-264

Description

Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.

Affected products

Logitech Lan-W300N/Ru2 Firmware: before 2.27 — fixed in 2.27

How to fix

Upgrade to a fixed version: Logitech Lan-W300N/Ru2 Firmware 2.27. Check the vendor advisory for mitigations.

References

http://jvn.jp/en/jp/JVN85934986/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051
http://secunia.com/advisories/49289
http://www.logitec.co.jp/info/2012/0516.html
http://www.securityfocus.com/bid/53685
http://jvn.jp/en/jp/JVN85934986/index.html
http://jvndb.jvn.jp/jvndb/JVNDB-2012-000051
http://secunia.com/advisories/49289
http://www.logitec.co.jp/info/2012/0516.html
http://www.securityfocus.com/bid/53685

Get alerted when CVE-2012-1250 or the next vulnerability affects your stack