Back to Database
Status published
High
CVE-2004-2606
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version...
Vulnerability Description
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2004-2606
Credits & Attribution
No credits recorded in the NVD database.
References
- ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip
- http://www.nwfusion.com/news/2004/0607confuse.html
- http://www.securityfocus.com/archive/1/365175
- http://secunia.com/advisories/11754
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html
- http://www.securityfocus.com/archive/1/365227/30/0/threaded
- http://www.osvdb.org/6577
- http://www.securityfocus.com/bid/10441
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html
- http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16274
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html
More from linksys
View All →CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown
0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical
9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High
7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium
4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High
7.5
Affected Vendor
linksys
View all reports →Affected Software
befsr41 v3, wrt54g
Vulnerable Versions:
2.02.7
Timeline
Official Publish:
November 29th, 2005
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.