PT-2009-2075 · 2Wire · 2Wire 1701Hg+3
Hkm
·
Published
2009-04-06
·
Updated
2017-09-29
·
CVE-2008-6605
CVSS v2.0
6.8
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
2wire 1701HG versions 3.17.5, 3.7.1, 4.25.19, or 5.29.51
2wire 1800HW versions 3.17.5, 3.7.1, 4.25.19, or 5.29.51
2wire 2071HG versions 3.17.5, 3.7.1, 4.25.19, or 5.29.51
2wire 2700HG versions 3.17.5, 3.7.1, 4.25.19, or 5.29.51
Description
A cross-site request forgery (CSRF) issue exists in the xslt script of the web-based management interface, allowing remote attackers to hijack the intranet connectivity of users. This can be achieved by sending requests that cause a denial of service, resulting in a network outage. The attack vector involves a page parameter with a % character followed by a non-alphanumeric character.
Recommendations
For 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51, consider disabling the xslt script in the web-based management interface as a temporary workaround until a patch is available.
Avoid using page parameters with a % character followed by a non-alphanumeric character in the affected API endpoint until the issue is resolved.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploit
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
2Wire 1701Hg
2Wire 1800Hw
2Wire 2071Hg
2Wire 2700Hg