Unscored severity · published Sep 14, 2005
CVE-2005-2916
Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which…
–
CVSS
1.1%
EPSS
No
On KEV
Description
Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.1% · higher than 65% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WR
Wrt54g · Linksys
3.01.3; 3.03.6; 4.00.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2916
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2916
Patch
http://www.idefense.com/application/poi/display?id=306&type=vulnerabilities
Patch
http://www.idefense.com/application/poi/display?id=307&type=vulnerabilities
More from Wrt54g
9.8
CVE-2024-8408
Linksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflow
8.8
CVE-2024-41281
Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function
–
CVE-2011-4499
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4…
–
CVE-2008-1264
The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML…
–
CVE-2008-1247
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary…