Back to Database
Status published
Medium
CVE-2006-5202
Linksys WRT54g firmware 1.00.9 does not require credentials when making...
Vulnerability Description
Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-5202
Credits & Attribution
No credits recorded in the NVD database.
References
- http://www.securityfocus.com/bid/19347
- https://kinqpinz.info/lib/wrt54g/
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html
- https://www.exploit-db.com/exploits/5926
- https://kinqpinz.info/lib/wrt54g/own2.txt
- http://www.kb.cert.org/vuls/id/930364
- http://secunia.com/advisories/21372
- http://securitytracker.com/id?1016638
More from linksys
View All →CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by...
Unknown
0
CVE-2022-38555
Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name....
Critical
9.8
CVE-2022-35572
On Linksys E5350 WiFi Router with firmware version 1.0.00.037 and...
High
7.5
CVE-2022-24372
Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary...
Medium
4.6
CVE-2020-35716
Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to...
High
7.5
Affected Vendor
linksys
View all reports →Affected Software
wrt54g
Vulnerable Versions:
1.00.9
Timeline
Official Publish:
October 9th, 2006
Last Modified:
August 7th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.