Weak Encryption Vulnerability in Linksys WRT54G Router
CVE-2005-2915

Currently unrated

Key Information:

Vendor
Linksys
Status
Wrt54g
Vendor
CVE Published:
14 September 2005

Summary

The WRT54G router's ezconfig.asp file uses weak encryption methods, specifically XOR encoding with a fixed byte mask, to protect its configuration data. This flaw can enable attackers to decrypt sensitive configuration information. Additionally, this vulnerability may allow the malicious re-encryption of the data, potentially in conjunction with related vulnerabilities, exposing the device and its network to security risks.

References

http://www.idefense.com/application/poi/display?id=304&ty...
third-party-advisoryx_refsource_IDEFENSE

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.