By default, DSL-500 uses with default SNMP community strings. The read only community string is 'public' and the read-write community string is 'private' which is publicly known and documented. This allows attackers to trivially access the program or system.
Classification
Location:
Remote / Network Access
Attack Type:
Authentication Management
Impact:
Loss of Integrity
Solution:
Workaround
Exploit:
Exploit Public
Disclosure:
Uncoordinated Disclosure
Solution
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s):
Disable the SNMP service on the remote host if you do not use it,
filter incoming UDP packets going to this port, or change the
default community string.
arhont.com -
Arhont Ltd.