Lucene search

MitreCVE-2008-1268

HistoryMar 10, 2008 - 5:44 p.m.

CVE-2008-1268

2008-03-1017:44:00

CWE-287

mitre

web.nvd.nist.gov

linksys wrt54g

router

firmware

ftp server

authentication bypass

remote attack

cve-2008-1268

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.009

Percentile

83.2%

JSON

The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password.

Affected configurations

Nvd

Node

linksyswrt54gMatch77.00.1

VendorProductVersionCPE
linksyswrt54g7cpe:2.3:h:linksys:wrt54g:7:*:7.00.1:*:*:*:*:*

Vendor	Product	Version	CPE
linksys	wrt54g	7	cpe:2.3:h:linksys:wrt54g:7::7.00.1:::::

References

swbae.egloos.com/1701135

www.gnucitizen.org/projects/router-hacking-challenge/

www.securityfocus.com/archive/1/489009/100/0/threaded

exchange.xforce.ibmcloud.com/vulnerabilities/41119

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.009

Percentile

83.2%

JSON

Related for CVE-2008-1268