7.8

CVE-2007-4389

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
2wire ≫ 1701hg Router Version 3.7.1
2wire ≫ 1701hg Router Version 3.17.5
2wire ≫ 1701hg Router Version 5.29.51
2wire ≫ 1800hw Router Version 3.7.1
2wire ≫ 1800hw Router Version 3.17.5
2wire ≫ 1800hw Router Version 5.29.51
2wire ≫ 2071 Router Version 3.7.1
2wire ≫ 2071 Router Version 3.17.5
2wire ≫ 2071 Router Version 5.29.51
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.14% 0.796
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 8.6 7.8
AV:N/AC:M/Au:N/C:N/I:P/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://securityreason.com/securityalert/3026
http://www.securityfocus.com/archive/1/476595/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
http://www.hakim.ws/2wire/demodns.html
http://www.securityfocus.com/bid/27246