CVE-2008-6605 - CVE House
Back to Database
Status published Medium CVE-2008-6605

Cross-site request forgery (CSRF) vulnerability in the xslt script in...

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that cause a denial of service (network outage) via a page parameter with a % (percent) character followed by a non-alphanumeric character.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-6605

Credits & Attribution

No credits recorded in the NVD database.

References

More from 2wire

View All →
CVE-2009-3962
The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW,...
High 7.8
CVE-2007-4389
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG,...
High 7.8
CVE-2007-4388
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly...
Critical 10
CVE-2007-4387
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG...
Medium 4.3
CVE-2004-2749
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as...
Medium 4.3

Affected Vendor

Affected Software

1701hg, 1800hw, 2071hg, 2700hg
Vulnerable Versions:
3.7.1, 3.17.5, 4.25.19, 5.29.51

Timeline

Official Publish: April 6th, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.