CVE-2008-1247 The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a....
HighCVSS 10.0
EPSS 5.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linksys wrt54g | All versions | No fix listed |
References
- kinqpinz.info exploit
- 29344 third-party-advisory
- www.gnucitizen.org
- 20080301 The Router Hacking Challenge is Over! mailing-list
- 28381 vdb-entry
- linksys-wrt54g-security-bypass(41118) vdb-entry
- kinqpinz.info
- kinqpinz.info
- 5313 exploit
- 5926 exploit