CVE-2008-2636
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
8.1 High
AI Score
Confidence
High
0.129 Low
EPSS
Percentile
95.5%
The HTTP service on the Cisco Linksys WRH54G with firmware 1.01.03 allows remote attackers to cause a denial of service (management interface outage) or possibly execute arbitrary code via a URI that begins with a “/./” sequence, contains many instances of a “front_page” sequence, and ends with a “.asp” sequence.
Affected configurations
| CPE | Name | Operator | Version |
|---|---|---|---|
| cisco:linksys_wrh54g_router | cisco linksys wrh54g router | eq | 1.01.03 |
Related
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
8.1 High
AI Score
Confidence
High
0.129 Low
EPSS
Percentile
95.5%