PT-2024-18014 · Linksys · Linksys Wrt54G

Leetsun

·

Published

2024-02-09

·

Updated

2024-05-17

·

CVE-2024-1404

CVSS v2.0
3.3
VectorAV:A/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions:

Linksys WRT54GL version 4.30.18

Description:

A vulnerability was found in the Web Management Interface of the Linksys WRT54GL, affecting some unknown functionality of the file /SysInfo.htm. This issue leads to information disclosure. The exploit has been disclosed to the public. The vendor was contacted about this disclosure but did not respond.

Recommendations:

For Linksys WRT54GL version 4.30.18, as a temporary workaround, consider restricting access to the /SysInfo.htm file of the Web Management Interface until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Information Disclosure

Weakness Enumeration

Related Identifiers

CVE-2024-1404

Affected Products

Linksys Wrt54G