CVEvulnerability
CVE-2008-1247
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-03-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202.
Affected configurations
• linksys wrt54g
Related
Weakness · not in database (1)
References
- http://kinqpinz.info/lib/wrt54g/own.txt Exploit
- http://secunia.com/advisories/29344 secunia.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ www.gnucitizen.org
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28381 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41118 exchange.xforce.ibmcloud.com
- https://kinqpinz.info/lib/wrt54g/ kinqpinz.info
- https://kinqpinz.info/lib/wrt54g/own2.txt kinqpinz.info
- https://www.exploit-db.com/exploits/5313 www.exploit-db.com
- https://www.exploit-db.com/exploits/5926 www.exploit-db.com
- http://kinqpinz.info/lib/wrt54g/own.txt Exploit
- http://secunia.com/advisories/29344 secunia.com
- http://www.gnucitizen.org/projects/router-hacking-challenge/ www.gnucitizen.org
- http://www.securityfocus.com/archive/1/489009/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/28381 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/41118 exchange.xforce.ibmcloud.com
- https://kinqpinz.info/lib/wrt54g/ kinqpinz.info
- https://kinqpinz.info/lib/wrt54g/own2.txt kinqpinz.info
- https://www.exploit-db.com/exploits/5313 www.exploit-db.com
- https://www.exploit-db.com/exploits/5926 www.exploit-db.com