Back to Database
Status published
High
CVE-2005-2914
ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of...
Vulnerability Description
ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2914
Credits & Attribution
No credits recorded in the NVD database.
More from linksys
View All →CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown
0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical
9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High
7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium
4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High
7.5
Affected Vendor
linksys
View all reports →Affected Software
wrt54g
Vulnerable Versions:
2.04.4, 3.01.3, 3.03.6
Timeline
Official Publish:
September 14th, 2005
Last Modified:
September 16th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.