Lucene search

MitreCVE-2005-2915

HistorySep 14, 2005 - 9:03 p.m.

CVE-2005-2915

2005-09-1421:03:00

mitre

web.nvd.nist.gov

linksys

wrt54g

router

vulnerability

weak encryption

xor encoding

cve-2005-2915

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.007

Percentile

81.0%

JSON

ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration information, which could allow attackers to decrypt the information and possibly re-encrypt it in conjunction with CVE-2005-2914.

Affected configurations

Nvd

Node

linksyswrt54gMatch2.04.4_non_default

linksyswrt54gMatch3.01.3

linksyswrt54gMatch3.03.6

VendorProductVersionCPE
linksyswrt54g2.04.4_non_defaultcpe:2.3:h:linksys:wrt54g:2.04.4_non_default:*:*:*:*:*:*:*
linksyswrt54g3.01.3cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*
linksyswrt54g3.03.6cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linksys	wrt54g	2.04.4_non_default	cpe:2.3:h:linksys:wrt54g:2.04.4_non_default:::::::*
linksys	wrt54g	3.01.3	cpe:2.3:h:linksys:wrt54g:3.01.3:::::::*
linksys	wrt54g	3.03.6	cpe:2.3:h:linksys:wrt54g:3.03.6:::::::*

References

www.idefense.com/application/poi/display?id=304&type=vulnerabilities

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.007

Percentile

81.0%

JSON

Related for CVE-2005-2915