CVE-2004-2606
First published: Fri Dec 31 2004(Updated: )
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Linksys BEFSR41 | ||
| Cisco Linksys WRT54G Router Firmware | =2.02.7 |
Remedy
http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html
- http://www.securityfocus.com/archive/1/365175
- http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html
- http://www.securityfocus.com/archive/1/365227/30/0/threaded
- http://www.nwfusion.com/news/2004/0607confuse.html
- http://www.securityfocus.com/bid/10441
- http://www.osvdb.org/6577
- http://secunia.com/advisories/11754
- http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16274
Frequently Asked Questions
What is the severity of CVE-2004-2606?
CVE-2004-2606 has a low severity rating but poses a risk as it can allow unauthorized login attempts to the administration web page.
How do I fix CVE-2004-2606?
To mitigate CVE-2004-2606, ensure that remote administration features are disabled and apply the latest firmware updates from Linksys.
Who is affected by CVE-2004-2606?
CVE-2004-2606 affects users of Linksys WRT54G version 2.02.7 and BEFSR41 version 3 with the firewall disabled.
What is the impact of CVE-2004-2606?
The impact of CVE-2004-2606 is that remote attackers may exploit it to attempt unauthorized access to the router's admin interface.
Is CVE-2004-2606 easy to exploit?
Yes, CVE-2004-2606 can be exploited easily by remote attackers due to misconfigured settings on affected devices.
- agent/references
- agent/type
- agent/first-publish-date
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/description
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/linksys
- canonical/linksys befsr41
- canonical/cisco linksys wrt54g router firmware
- version/cisco linksys wrt54g router firmware/2.02.7