Back to Database
Status published
High
CVE-2006-2559
Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass...
Vulnerability Description
Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-2559
Credits & Attribution
No credits recorded in the NVD database.
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26707
- http://secunia.com/advisories/20161
- http://securitytracker.com/id?1016134
- http://www.securityview.org/how-does-the-upnp-flaw-works.html
- http://www.vupen.com/english/advisories/2006/1909
- http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
More from linksys
View All →CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown
0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical
9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High
7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium
4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High
7.5
Affected Vendor
linksys
View all reports →Affected Software
wrt54g, wrt54g v5
Vulnerable Versions:
1.42.3, 2.00.8, 2.02.7, 2.04.4, 2.04.4_non_default, 3.01.3, 3.03.6, 4.00.7
Timeline
Official Publish:
May 24th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.