CVE-2005-3253 json
Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim A…
published 2005-12-16 20 y ago modified 2026-06-16 4 mo ago also EUVD-2005-3252
- cvss
- 7.5
- version 2.0, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 1.8%
- EPSS 1.8% chance of exploitation in 30 days, percentile 78%
- public exploits
- 0
- none known
Summary
Wireless Access Points (AP) for (1) Avaya AP-3 through AP-6 2.5 to 2.5.4, and AP-7/AP-8 2.5 and other versions before 3.1, and (2) Proxim AP-600 and AP-2000 before 2.5.5, and Proxim AP-700 and AP-4000 after 2.4.11 and before 3.1, use a static WEP key of "12345", which allows remote attackers to bypass authentication.
Patch / fix
Exploit prediction
1.80% chance of exploitation in the next 30 days, higher than 78% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| NVD | 2.0 | 7.5 | AV:N/AC:L/Au:N/C:P/I:P/A:P |
References
-
secunia.com
/advisories/18047
third-party-advisory, patch, vendor-advisory
-
support.avaya.com
/elmodocs2/security/ASA-2005-233.pdf
patch, vendor-advisory
-
osvdb.org
/22091
vdb-entry
-
secunia.com
/advisories/18057
third-party-advisory
-
vupen.com
/english/advisories/2005/2931
vdb-entry
- keygen.proxim.com /support/cs/Documents/802.1x_vulnerability.pdf
Sources
- CVE List CVE-2005-3253
- NVD CVE-2005-3253
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.