7.8

CVE-2007-4389

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
2wire ≫ 1701hg Router Version3.7.1
2wire ≫ 1701hg Router Version3.17.5
2wire ≫ 1701hg Router Version5.29.51
2wire ≫ 1800hw Router Version3.7.1
2wire ≫ 1800hw Router Version3.17.5
2wire ≫ 1800hw Router Version5.29.51
2wire ≫ 2071 Router Version3.7.1
2wire ≫ 2071 Router Version3.17.5
2wire ≫ 2071 Router Version5.29.51
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.14% 0.796
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.8 8.6 7.8
AV:N/AC:M/Au:N/C:N/I:P/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://securityreason.com/securityalert/3026
http://www.securityfocus.com/archive/1/476595/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
http://www.hakim.ws/2wire/demodns.html
http://www.securityfocus.com/bid/27246