CVE-2004-2606

EPSS 2.59%
Veröffentlicht 31.12.2004 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 16

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Linksys ≫ Befsr41 V3

Linksys ≫ Wrt54g Version2.02.7

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	2.59%	0.842

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	7.5	10	6.4	AV:N/AC:L/Au:N/C:P/I:P/A:P

ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip

Patch

http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html

http://secunia.com/advisories/11754

Patch

Vendor Advisory

http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201

Patch

http://www.nwfusion.com/news/2004/0607confuse.html

http://www.osvdb.org/6577

http://www.securityfocus.com/archive/1/365175

http://www.securityfocus.com/archive/1/365227/30/0/threaded

http://www.securityfocus.com/bid/10441

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/16274

https://nvd.nist.gov/vuln/detail/CVE-2004-2606

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2004-2606

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2004-2606

EUVD