PT-2005-2079 · Linksys · Linksys Wet11

Publicado 2005-04-12 · Atualizado 2017-07-11 · CVE-2005-1059

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linksys WET11 version 1.5.4

Description The issue allows remote attackers to change the password without providing the original password by manipulating the data parameter to the "changepw.html" endpoint.

Recommendations For Linksys WET11 version 1.5.4, consider restricting access to the "changepw.html" endpoint until a patch is available. As a temporary workaround, avoid using the data parameter in the "changepw.html" endpoint to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2005-1059

Produtos afetados

Linksys Wet11

Referências · 6

• 🔥 https://exploit-db.com/exploits/25359 · Exploit
• 🔥 http://derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html · Exploit
• 🔥 http://securityfocus.com/bid/13051 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20008 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-1059 · Nota de Segurança
• http://secunia.com/advisories/14871 · Aviso do Fabricante