CVE-2007-4387

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...

CVE-2007-4389

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters...

Default credentials

2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...

CVE-2007-4389

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters...

CVE-2007-4388

2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default...

CVE-2007-4387

CVE-2007-4387 affects 2Wire routers (1701HG, 2071) with software versions 3.17.5/5.29.51. The flaw is a cross-site request forgery on the /xslt page that allows an attacker to perform configuration changes as an administrator. Related public material (PacketStorm, Metasploit module) confirms a CS...

CVE-2007-4388

The provided connected documents confirm a vulnerability in 2wire 1701HG and 2071 Gateway routers running software 5.29.51 (and possibly 3.17.5), where a blank password is set by default. This implies potential unauthorized access to router management/settings if default credentials are not chang...

CVE-2007-4387

Cross-site request forgery CSRF vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators...

CVE-2007-4389

CVE-2007-4389 affects 2wire gateways (models 1701HG, 1800HW, 2071) with firmware 3.17.5, 3.7.1, and 5.29.51. A CSRF flaw in /xslt allows remote attackers to create DNS mappings as administrators, enabling DNS poisoning via NAME and ADDR parameters. The sources describe the affected products and t...

2wire routers crossite request forgery

Referer is not checked on configuration form submission...

Cross Site Request Forgery in 2wire routers

Cross Site Request Forgery in 2wire routers Vulnerable Routers: 1701HG, 2071 Gateway Software: v3.17.5, 5.29.51 Password Not Set default Greetz a la Comunidad Underground de Mйxico, y a los que me ayudaron a probarlo: Preth00nker, nitr0us, ... [email protected] I. Background ------------- This is the...

2Wire Routers Cross-Site Request Forgery Vulnerability

Description Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device. Technologies Affected 2Wire 1701HG 3.17.5 2Wire 1701HG 3.7.1 2Wire 1701HG 5.29.51 2Wire 1800HW 3.17.5...

2Wire路由器Web管理接口远程拒绝服务漏洞

2Wire HomePortal和OfficePortal都是2Wire推出的小型路由器设备。 2Wire路由器的Web管理接口处理用户请求时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果向2Wire路由器的WEB管理接口发送了包含有换行符参数的特制GET请求的话，就会导致拒绝服务，必须重启路由器才能恢复正常运行。 2wire HomePortal Series 2wire OfficePortal Series 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.2wire.com/...

CVE-2006-4523

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...

CVE-2006-4523

CVE-2006-4523 affects 2Wire HomePortal and OfficePortal Series modems/routers: the web-based management interface is vulnerable to a DoS via a CRLF sequence in a GET request, causing a crash. Root cause is input parsing of CRLF within the request; impact is partial availability loss. Connected do...

CVE-2006-4523

The web-based management interface in 2Wire, Inc. HomePortal and OfficePortal Series modems and routers allows remote attackers to cause a denial of service crash via a CRLF sequence in a GET request...

2WIRE ModemsRouters - CRLF Denial of Service

2WIRE ModemsRouters - CRLF Denial of Service //Vulnerable: //2Wire OfficePortal 0 //2Wire HomePortal 1500W //2Wire HomePortal 100W //2Wire HomePortal 100S //2Wire HomePortal 1000W //2Wire HomePortal 1000SW //2Wire HomePortal 1000S //2Wire HomePortal 1000 //2Wire HomePortal 0...

2wire Modems/Routers CRLF Denial of Service Exploit

No description provided by source. //Vulnerable: //2Wire OfficePortal 0 //2Wire HomePortal 1500W //2Wire HomePortal 100W //2Wire HomePortal 100S //2Wire HomePortal 1000W //2Wire HomePortal 1000SW //2Wire HomePortal 1000S //2Wire HomePortal 1000 //2Wire HomePortal 0...