Vulnerability in Linksys Wrt54g

CVE-2005-2916

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using res…

EPSS: 0.011 (61.5th percentile) — read the EPSS interpretation.

Affected products

  • Linksys Wrt54g — versions 3.01.3, 3.03.6, 4.00.7
  • N/a — versions n/a

References

  • cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)
  • cve@mitre.org (x_refsource_IDEFENSE, Patch, Vendor Advisory, third-party-advisory)