Lucene search
HistoryOct 10, 2006 - 4:06 a.m.
CVE-2006-5202
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.017
Percentile
88.2%
Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.
Affected configurations
Node
linksyswrt54gMatch1.00.9
Related
cvelist
cvelist
cve
cve
prion
prion
Authentication flaw
2006-05-24 01:02:00
Design/Logic Flaw
2008-03-10 17:44:00
nvd
nvd
CVE-2006-2559
2006-05-24 01:02:00
CVE-2008-1247
2008-03-10 17:44:00
exploitpack
exploitpack
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
2008-06-24 00:00:00
zdt
zdt
Linksys WRT54G (firmware 1.00.9) Security Bypass Vulnerabilities (2)
2008-06-24 00:00:00
exploitdb
exploitdb
Linksys WRT54G Firmware 1.00.9 - Security Bypass (2)
2008-06-24 00:00:00
packetstorm
packetstorm
linksys54g-bypass.txt
2008-06-24 00:00:00
CVSS2
5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
AI Score
6.6
Confidence
Low
EPSS
0.017
Percentile
88.2%
Related for NVD:CVE-2006-5202