Remote Access Vulnerability in Linksys WRT54G Router

CVE-2005-2914

Summary

The Linksys WRT54G router suffers from a security flaw in the ezconfig.asp file that affects multiple versions. This vulnerability arises due to the absence of an authentication initialization function, enabling remote attackers to gain unauthorized access to encrypted configuration information. If attackers possess the decryption key, they can modify critical router configurations, potentially leading to further exploitation of the network.

References