VULHUB ™

The Allied Telesyn AT-AR220E Cable/DSL router includes port mapping (or "virtual server") functionality. A flaw exists in the router configuration which under certain circumstances may allow a remote access to gain access to mapped services that are supposed to be disabled. The configuration allows mapped ports to be enabled and disabled on an individual basis. When the "Virtual-Server-feature" option is enabled, the individual controls are ignored and all configured ports are left open.

The Allied Telesyn AT-AR220E Cable/DSL router includes port mapping (or "virtual server") functionality. A flaw exists in the router configuration which under certain circumstances may allow a remote access to gain access to mapped services that are supposed to be disabled. The configuration allows mapped ports to be enabled and disabled on an individual basis. When the "Virtual-Server-feature" option is enabled, the individual controls are ignored and all configured ports are left open.