PT-2007-2968 · Linksys · Linksys Wrt54G+1

Published 2007-03-21 · Updated 2018-10-16 · CVE-2007-1585

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linksys WAG200G version 1.01.01 Linksys WRT54GC 2 version 1.00.7 Linksys WRT54GC 1 versions 1.03.0 and earlier

Description The issue allows remote attackers to obtain sensitive information, including passwords and configuration data, by sending a packet to UDP port 916.

Recommendations For Linksys WAG200G version 1.01.01, update the firmware to a version that addresses this issue. For Linksys WRT54GC 2 version 1.00.7, update the firmware to a version that addresses this issue. For Linksys WRT54GC 1 versions 1.03.0 and earlier, update the firmware to a version later than 1.03.0. As a temporary workaround, consider restricting access to UDP port 916 until a patch is available.

Fix

Related Identifiers

CVE-2007-1585

Affected Products

Linksys Wag200G

Linksys Wrt54G

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-1585 · Security Note
• http://secunia.com/advisories/24658 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/33251 · Note
• http://marc.info/?l=bugtraq&m=117492736903388&w=2 · Note
• http://securityfocus.com/archive/1/463342/100/0/threaded · Note
• http://securityfocus.com/bid/23063 · Note