Linksys WRH54G 1.1.3 Wireless-G Router - HTTP Request Denial of Service

source: https://www.securityfocus.com/bid/29570/info Linksys WRH54G Wireless-G Router is prone to a denial-of-service vulnerability because it fails to adequately handle malformed HTTP requests. As a result, memory becomes corrupted and the device's HTTP service will crash. Successful exploits wi...

CVE-2007-6709

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...

Default credentials

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...

CVE-2007-6707

Multiple cross-site scripting XSS vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574...

CVE-2007-6708

Multiple cross-site request forgery CSRF vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by 1 a Restore Facto...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574...

CVE-2007-6709

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access...

CVE-2007-6708

The CVE-2007-6708 entry describes CSRF vulnerabilities in the Cisco Linksys WAG54GS Wireless-G ADSL Gateway (firmware 1.01.03 and earlier). An attacker can forge requests to setup.cgi to perform admin actions without authentication, demonstrated by (1) Restore Factory Defaults via the mtenRestore...

CVE-2007-6709

CVE-2007-6709 affects the Cisco Linksys WAG54GS Wireless-G ADSL Gateway (firmware 1.01.03 and earlier). The root cause is a default password policy where the admin account uses the password “admin,” enabling remote attackers to gain access. Public details in the provided documents confirm the vul...

CVE-2007-6708

Multiple cross-site request forgery CSRF vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by 1 a Restore Facto...

CVE-2007-6707

CVE-2007-6707 describes multiple XSS vulnerabilities in the Cisco Linksys WAG54GS Wireless-G ADSL Gateway (firmware 1.01.03 and earlier) via the device’s web interface, enabling remote script injection through unspecified vectors. The connected records confirm affected product and firmware family...

CVE-2008-0403

The web server in Belkin Wireless G Plus MIMO Router F5D9230-4 does not require authentication for SaveCfgFile.cgi, which allows remote attackers to read and modify configuration via a direct request to SaveCfgFile.cgi...

CVE-2008-0228

Cross-site request forgery CSRF vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators...

CVE-2008-0228

The CVE-2008-0228 entry describes a CSRF vulnerability in the Linksys WRT54GL Wireless-G Broadband Router. The flaw resides in the router’s web interface (apply.cgi) and is triggered by unauthenticated, remote requests that enable an attacker to perform actions as administrators. The affected sof...

Design/Logic Flaw

The Belkin F5D7230-4 Wireless G Router allows remote attackers to cause a denial of service degraded networking and logging via a flood of TCP SYN packets, a related issue to CVE-1999-0116...

CVE-2007-6040

The CVE-2007-6040 entry concerns the Belkin F5D7230-4 Wireless G Router: a remote denial-of-service via a flood of TCP SYN packets, degrading networking and logging. The provided materials do not specify affected firmware versions, exact root cause details, exploit codes, or mitigations. Connecte...

Belkin Wireless G Router DoS

ATI security Group has discovered a Denial of Service Vulnerability in the Belkin Wireless G Router's. Vulnerability: Denial of Service SYN FLOOD Simple Dork: http://RouterIp DoS SYN FLOOD on ROUTER Vulnerable Product; Belkin Wireless G Router Router Model F5D7230-4 Tested on; Belkin Wireless G...

CVE-2007-3574

CVE-2007-3574 records multiple XSS vulnerabilities in Cisco Linksys WAG54GS Wireless-G ADSL Gateway, specifically in setup.cgi with firmware 1.00.06. An attacker can inject arbitrary web script or HTML via the parameters c4_trap_ip_, devname, snmp_getcomm, and snmp_setcomm, exploiting unsanitized...

CVE-2007-3574

Multiple cross-site scripting XSS vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the 1 c4trapip, 2 devname, 3 snmpgetcomm, or 4 snmpsetcomm parameter...

Linksys WAG54GS 1.0.6 (Wireless-G ADSL Gateway) - setup.cgi Cross-Site Scripting

Linksys WAG54GS 1.0.6 Wireless-G ADSL Gateway - setup.cgi Cross-Site Scripting source: https://www.securityfocus.com/bid/24682/info Linksys Wireless-G ADSL Gateway is prone to multiple cross-site scripting vulnerabilities because the application fails to properly sanitize user-supplied input...