CVE-2001-0618 Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear durin...
HighCVSS 7.5
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Orinoco RG-1000 wireless Residential Gateway uses the last 5 digits of the 'Network Name' or SSID as the default Wired Equivalent Privacy (WEP) encryption key. Since the SSID occurs in the clear during communications, a remote attacker could determine the WEP key and decrypt RG-1000 traffic.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| lucent orinoco rg-1000 | All versions | No fix listed |
References
- 20010402 RG-1000 802.11 Residential Gateway default WEP key disclosure flaw exploit mailing-list vendor-advisory
- orinoco-rg1000-wep-key(6328) vdb-entry