PT-2008-1670 · Cisco · Cisco Linksys Wag54Gs Wireless-G Adsl Gateway

Published 2008-03-13 · Updated 2018-10-15 · CVE-2007-6709

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Cisco Linksys WAG54GS Wireless-G ADSL Gateway versions 1.01.03 and earlier

Description The device has a default password for the admin account, which is set to admin. This makes it easier for remote attackers to gain access.

Recommendations For versions 1.01.03 and earlier, change the default password for the admin account to a strong and unique password to prevent unauthorized access.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2007-6709

Affected Products

Cisco Linksys Wag54Gs Wireless-G Adsl Gateway

References · 6

• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• 🔥 http://gnucitizen.org/blog/persistent-xss-and-csrf-on-wireless-g-adsl-gateway-with-speedbooster-wag54gs · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6709 · Security Note
• http://osvdb.org/43536 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41268 · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note