CVE-2005-2799

Currently unrated

Key Information:

Vendor
Linksys
Status
Wrt54g
Vendor
CVE Published:
15 September 2005

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 75%

Summary

Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST request.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2005-2799
Created by Rapid7

Metasploit exploit module for CVE-2005-2799
Created by Rapid7

References

http://www.idefense.com/application/poi/display?id=305&ty...
third-party-advisoryx_refsource_IDEFENSE

EPSS Score

75% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability Reserved

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

.