7.8
CVSSv2

CVE-2007-4389

Published: 17/08/2007 Updated: 15/10/2018
CVSS v2 Base Score: 7.8 | Impact Score: 7.8 | Exploitability Score: 8.6
VMScore: 785
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:C

Vulnerability Summary

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote malicious users to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

2wire 1800hw router 3.17.5

2wire 1800hw router 3.7.1

2wire 1701hg router 3.7.1

2wire 1701hg router 5.29.51

2wire 1701hg router 3.17.5

2wire 2071 router 3.7.1

2wire 2071 router 5.29.51

2wire 1800hw router 5.29.51

2wire 2071 router 3.17.5

Exploits

source: wwwsecurityfocuscom/bid/27246/info Multiple 2Wire routers are prone to a cross-site request-forgery vulnerability Exploiting this issue may allow a remote attacker to execute arbitrary actions on an affected device Set a password (NUEVOPASS): 1921681254/xslt?PAGE=A05_POST&THISPAGE=A05&NEXTPAGE=A05_POST&E ...