PT-2005-2079 · Linksys · Linksys Wet11

Published 2005-04-12 · Updated 2017-07-11 · CVE-2005-1059

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Linksys WET11 version 1.5.4

Description The issue allows remote attackers to change the password without providing the original password by manipulating the data parameter to the "changepw.html" endpoint.

Recommendations For Linksys WET11 version 1.5.4, consider restricting access to the "changepw.html" endpoint until a patch is available. As a temporary workaround, avoid using the data parameter in the "changepw.html" endpoint to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-1059

Affected Products

Linksys Wet11

References · 6

• 🔥 https://exploit-db.com/exploits/25359 · Exploit
• 🔥 http://derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html · Exploit
• 🔥 http://securityfocus.com/bid/13051 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1059 · Security Note
• http://secunia.com/advisories/14871 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20008 · Note