VULNERABILITY INTELLIGENCE

CVE-2005-2916

CVSS score5 MEDIUM
EPSS probability1.08%
CISA KEVNot currently listed
Published2005-09-14
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.

Primary references