CVE-2007-4387 Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as...
MediumCVSS 4.3
EPSS 9.2%
Framework module
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| 2wire 1701hg router | = 3.17.5 | No fix listed |
| 2wire 1701hg router | = 5.29.51 | No fix listed |
| 2wire 2071 router | = 3.17.5 | No fix listed |
| 2wire 2071 router | = 5.29.51 | No fix listed |
References
- 37667 vdb-entry
- 26496 third-party-advisory
- 3026 third-party-advisory
- 20070815 Cross Site Request Forgery in 2wire routers mailing-list
- 2wire-xslt-csrf(36044) vdb-entry