PT-2008-1670 · Cisco · Cisco Linksys Wag54Gs Wireless-G Adsl Gateway

Publicado 2008-03-13 · Atualizado 2018-10-15 · CVE-2007-6709

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Linksys WAG54GS Wireless-G ADSL Gateway versions 1.01.03 and earlier

Description The device has a default password for the admin account, which is set to admin. This makes it easier for remote attackers to gain access.

Recommendations For versions 1.01.03 and earlier, change the default password for the admin account to a strong and unique password to prevent unauthorized access.

Exploit

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2007-6709

Produtos afetados

Cisco Linksys Wag54Gs Wireless-G Adsl Gateway

Referências · 6

• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• 🔥 http://gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs · Exploit
• http://osvdb.org/43536 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6709 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41268 · Nota
• http://securityfocus.com/archive/1/489009/100/0/threaded · Nota