CVE-2002-2159 Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options....
HighCVSS 10.0
EPSS 2.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linksys befsr11 | = 1.42.7 | No fix listed |
| linksys befsr41 | = 1.42.7 | No fix listed |
| linksys befsru31 | = 1.42.7 | No fix listed |
References
- linksys-etherfast-admin-enabled(9330) vdb-entry
- www.securiteam.com vendor-advisory
- 4987 vdb-entry