Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
10
CVSSv2

CVE-2008-1247

Published: 10/03/2008 Updated: 11/10/2018
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Subscribe to Linksys

Vulnerability Summary

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote malicious users to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202.

Vulnerable Product Search on Vulmon Subscribe to Product

linksys wrt54g

Exploits

Exploit DB: Linksys WRT54G Firmware 1.00.9 - Security Bypass (1)
regurgitated by: meathive url: kinqpinzinfo ;] Tue, 05 Feb 2008 07:51:41 -0700 ############################################################################ CVE-2008-1247 WRT54G firmware version: v1009 Default LAN IP: 192168 ...
Exploit DB: linksys54g-bypass.txt
The Linksys WRT54G (firmware 1009) suffers from multiple security bypass vulnerabilities ...
Exploit DB: linksys-bypass.txt
The Linksys WRT54G firmware version 1009 suffers from a slew of bypass vulnerabilities Full details provided ...

References

CWE-264http://kinqpinz.info/lib/wrt54g/own.txthttp://www.gnucitizen.org/projects/router-hacking-challenge/http://www.securityfocus.com/bid/28381http://secunia.com/advisories/29344https://kinqpinz.info/lib/wrt54g/own2.txthttps://kinqpinz.info/lib/wrt54g/https://exchange.xforce.ibmcloud.com/vulnerabilities/41118https://www.exploit-db.com/exploits/5926https://www.exploit-db.com/exploits/5313http://www.securityfocus.com/archive/1/489009/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/5313/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
deserializationCVE-2024-4040cross-site scriptingCVE-2023-25790CVE-2024-2961XML external entityCVE-2024-26926CVE-2024-32806CVE-2024-32711
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook