Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

This page summarizes all known security issues, workarounds and fixes for the beroNet Gateway and Card Firmware. 

...

The problem exists in all firmwares 2.X and 3.X. You can simply check if you can download a file with your browser by accessing the Web-URL:

https://IP-Adresse:Port/app/berogui/misc/fileContent.php?filename=/usr/conf/isgw.conf

Workaround & Precautions

To use this attack method http access to the gateway is required. Since in most use cases the gateway is behind a firewall, the http port should only be accessible by authorized administrators. The Firmware provides an ACL configuration.

...