CVE-2004-2606

EPSS 2.59%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 16.04.2026 00:27:16
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 16

NVD 2 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linksys ≫ Befsr41 V3

Linksys ≫ Wrt54g Version2.02.7

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.59%	0.842

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

Es wurden noch keine Informationen zu CWE veröffentlicht.

ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip

Patch

http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html

http://secunia.com/advisories/11754

Patch

Vendor Advisory

http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201

Patch

http://www.nwfusion.com/news/2004/0607confuse.html

http://www.osvdb.org/6577

http://www.securityfocus.com/archive/1/365175

http://www.securityfocus.com/archive/1/365227/30/0/threaded

http://www.securityfocus.com/bid/10441

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/16274

https://nvd.nist.gov/vuln/detail/CVE-2004-2606

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2606

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2606

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2004-2606