Back to Database
Status published
Medium
CVE-2005-2916
Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before...
Vulnerability Description
Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2005-2916
Credits & Attribution
No credits recorded in the NVD database.
References
More from linksys
View All →CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown
0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical
9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High
7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium
4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High
7.5
Affected Vendor
linksys
View all reports →Affected Software
wrt54g
Vulnerable Versions:
3.01.3, 3.03.6, 4.00.7
Timeline
Official Publish:
September 14th, 2005
Last Modified:
September 17th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.