2WIRE Gateway - Authentication Bypass Password Reset (1)

2WIRE Gateway - Authentication Bypass Password Reset 1 2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to...

2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities

Exploit for hardware platform in category remote exploits ==================================================================== 2WIRE Gateway Authentication Bypass & Password Reset Vulnerabilities ==================================================================== 2WIRE GATEWAY AUTHENTICATION...

2WIRE Gateway Authentication Bypass & Password Reset

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET ==================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously set. By setting a n...

2WIRE Gateway - Authentication Bypass / Password Reset (1)

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET 08/04/09 ============================================================== DESCRIPTION ----------------- There is an authentication bypass vulnerability in page=CD35SETUP01 that allows you to set a new password even if the password was previously...

2Wire routers unauthorized access

It's possible to reset password without knowledge of old one...

2WIRE Routers - 'CD35_SETUP_01' Access Validation

source: https://www.securityfocus.com/bid/36031/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this issue to change the router's administrative...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that...

CVE-2008-6605

Cross-site request forgery CSRF vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that...

CVE-2008-6605

The CVE-2008-6605 entry describes a CSRF vulnerability in the xslt script of the web-based management interface on 2wire devices (models 1701HG, 1800HW, 2071HG, 2700HG) with firmware versions 3.17.5, 3.7.1, 4.25.19, or 5.29.51. The vulnerability may allow remote attackers to hijack intranet conne...

2wire-dos.txt

2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric character. PoC: this can be set in an...

2WIRE DSL Router (xslt) Denial of Service Vulnerability

No description provided by source. 2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric...

2WIRE DSL Router - xslt Denial of Service

2WIRE DSL Router - xslt Denial of Service 2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa...

2WIRE DSL Router - 'xslt' Denial of Service

2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG, 2700HG Gateway Firmware: v3.17.5, 3.7.1, 4.25.19, 5.29.51 The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric character. PoC: this can be set in an...

2WIRE DSL Router (xslt) Denial of Service Vulnerability

Exploit for hardware platform in category dos / poc ======================================================= 2WIRE DSL Router xslt Denial of Service Vulnerability ======================================================= 2WIRE ROUTER DSL DENIAL OF SERVICE VULNERABLE Model: 1701HG, 1800HW, 2071HG,...

2WIRE Routers - H04_POST Access Validation

2WIRE Routers - H04POST Access Validation source: https://www.securityfocus.com/bid/27516/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this...

2WIRE Routers - 'H04_POST' Access Validation

source: https://www.securityfocus.com/bid/27516/info Multiple 2Wire routers are prone to an access-validation vulnerability because they fail to adequately authenticate users before performing certain actions. Unauthenticated attackers can leverage this issue to change the password of arbitrary...

2WIRE Routers - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password NUEVOPASS:...

2WIRE Routers - Cross-Site Request Forgery

2WIRE Routers - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Set a password...

CVE-2004-2749

Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. dot dot in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error...

CVE-2004-2749

CVE-2004-2749 affects 2Wire Gateway family (e.g., HomePortal) with a vulnerable wra/public/wralogin path. The issue is a directory traversal vulnerability that allows remote attackers to read arbitrary files by supplying a .. in the return parameter. The exact affected product lines and versions ...