CVEvulnerability
CVE-2004-2606
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.
Affected configurations
• linksys befsr41 v3
• linksys wrt54g 2.02.7
References
- ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip Patch
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html archives.neohapsis.com
- http://secunia.com/advisories/11754 Patch, Vendor Advisory
- http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201 Patch
- http://www.nwfusion.com/news/2004/0607confuse.html www.nwfusion.com
- http://www.osvdb.org/6577 www.osvdb.org
- http://www.securityfocus.com/archive/1/365175 www.securityfocus.com
- http://www.securityfocus.com/archive/1/365227/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/10441 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16274 exchange.xforce.ibmcloud.com
- ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip Patch
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html archives.neohapsis.com
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html archives.neohapsis.com
- http://secunia.com/advisories/11754 Patch, Vendor Advisory
- http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201 Patch
- http://www.nwfusion.com/news/2004/0607confuse.html www.nwfusion.com
- http://www.osvdb.org/6577 www.osvdb.org
- http://www.securityfocus.com/archive/1/365175 www.securityfocus.com
- http://www.securityfocus.com/archive/1/365227/30/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/10441 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16274 exchange.xforce.ibmcloud.com