CVEvulnerability
CVE-2009-1561
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-05-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-352
Description
Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters.
Affected configurations
• cisco wrt54gc 1.05.7
Related
Weakness · CWE (1)
- CWE-352 Cross-Site Request Forgery weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html archives.neohapsis.com
- http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt Exploit
- http://secunia.com/advisories/34805 Vendor Advisory
- http://www.falandodeseguranca.com/?p=17 www.falandodeseguranca.com
- http://www.securityfocus.com/bid/34616 Exploit
- http://www.vupen.com/english/advisories/2009/1172 Vendor Advisory
- http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html archives.neohapsis.com
- http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txt Exploit
- http://secunia.com/advisories/34805 Vendor Advisory
- http://www.falandodeseguranca.com/?p=17 www.falandodeseguranca.com
- http://www.securityfocus.com/bid/34616 Exploit
- http://www.vupen.com/english/advisories/2009/1172 Vendor Advisory