CVE-2006-5202

Currently unrated 🤨

Key Information

Vendor
Linksys
Status
Wrt54g
Vendor
CVE Published:
10 October 2006

Summary

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.

References

http://www.securityfocus.com/bid/19347
vdb-entryx_refsource_BID
https://kinqpinz.info/lib/wrt54g/
x_refsource_MISC
http://lists.grok.org.uk/pipermail/full-disclosure/2006-A...
mailing-listx_refsource_FULLDISC

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.