CVE-2012-1250

CRITICAL 10.0CVE-2012-1250 · Published 04/06/2012 · updated 16/06/2026

In short

CVE-2012-1250 is a CRITICAL (CVSS 10.0) vulnerability affecting lan-w300n/ru2 firmware (logitech).
Chance of exploitation in the next 30 days (EPSS): 5.8%, higher than 93.1% of all vulnerabilities.
Fix: update to 2.27 or later.

Package	Affected versions	Patched versions
lan-w300n/ru2 firmware logitech	`< 2.27`	`2.27`

Description

Logitec LAN-W300N/R routers with firmware before 2.27 do not properly restrict login access, which allows remote attackers to obtain administrative privileges and modify settings via vectors related to PPPoE authentication.

References

jvn.jp/en/jp/JVN85934986/index.html · Third Party Advisory
jvndb.jvn.jp/jvndb/JVNDB-2012-000051 · Third Party Advisory
secunia.com/advisories/49289 · Broken Link
logitec.co.jp/info/2012/0516.html · Vendor Advisory
securityfocus.com/bid/53685 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free