PT-2008-2855 · Linksys · Linksys Wrt54G

Published 2008-03-10 · Updated 2018-10-11 · CVE-2008-1263

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Linksys WRT54G router (affected versions not specified)

Description The issue concerns the storage of passwords and keys in cleartext in the Config.bin file. This might allow remote authenticated users to obtain sensitive information via an HTTP request for the top-level Config.bin URI.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2008-1263

Affected Products

Linksys Wrt54G

References · 4

• 🔥 http://gnucitizen.org/projects/router-hacking-challenge · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1263 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41115 · Note
• http://securityfocus.com/archive/1/489009/100/0/threaded · Note