Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cveMitreCVE-2008-1247
HistoryMar 10, 2008 - 5:44 p.m.

CVE-2008-1247

2008-03-1017:44:00
CWE-264
mitre
web.nvd.nist.gov
45
linksys
wrt54g
router
firmware
vulnerability
web interface
remote attackers
administrative actions
cve-2008-1247

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.127

Percentile

95.6%

JSON

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202.

Affected configurations

Nvd
Node
linksyswrt54g1.00.9
VendorProductVersionCPE
linksyswrt54g*cpe:2.3:h:linksys:wrt54g:*:*:1.00.9:*:*:*:*:*

Related

cvelist 2
nvd 2
exploitdb 2
packetstorm 2
exploitpack 2
zdt 2
prion 1
seebug 2
cve 1
cvelist
cvelist
CVE-2008-1247
2008-03-10 17:00:00
CVE-2006-5202
2006-10-09 18:00:00
nvd
nvd
CVE-2008-1247
2008-03-10 17:44:00
CVE-2006-5202
2006-10-10 04:06:00
exploitdb
exploitdb
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
2008-06-24 00:00:00
Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)
2008-03-26 00:00:00
packetstorm
packetstorm
linksys54g-bypass.txt
2008-06-24 00:00:00
linksys-bypass.txt
2008-03-26 00:00:00
exploitpack
exploitpack
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
2008-06-24 00:00:00
Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)
2008-03-26 00:00:00
zdt
zdt
Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities (2)
2008-06-24 00:00:00
Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities
2008-03-26 00:00:00
prion
prion
Design/Logic Flaw
2008-03-10 17:44:00
seebug
seebug
Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities
2008-03-27 00:00:00
Linksys WRT54G (firmware 1.00.9) - Security Bypass Vulnerabilities
2014-07-01 00:00:00
cve
cve
CVE-2006-5202
2006-10-10 04:06:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

6.6

Confidence

Low

EPSS

0.127

Percentile

95.6%

JSON
Related for CVE-2008-1247
cvelist2nvd2exploitdb2packetstorm2exploitpack2zdt2prion1seebug2cve1