Weak Password Change Mechanism in Linksys WAG200G Router by Linksys

CVE-2013-20008

What is CVE-2013-20008?

The Linksys WAG200G router up to version 1.01.06 is susceptible to a vulnerability that permits attackers to modify the administrator password without requiring the current password. This loophole enables anyone with access to an authenticated administrator session the ability to set a new password. Consequently, this situation allows unauthorized users to lock out legitimate administrators and gain persistent control over the device, which raises significant security concerns for users relying on this router.

References