CVE-2013-20008: Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Q: What access does an attacker need to exploit this issue?

The attacker needs access to an already authenticated administrator browser session. No current administrator password is required when changing the password through the vulnerable mechanism.

Q: What is the practical impact of a successful exploit?

An attacker can set a new administrator password, lock out the legitimate administrator, and retain persistent control of the device.

Q: Which devices are identified as affected?

The affected product is the Linksys WAG200G running firmware through version 1.01.06.

Published Oct 28, 2026

Updated

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.

Affected Software

1 affected component

LinkSys WAG200G<=1.01.06

Event History

Oct 28, 2026

CVE Published

via MITRE·02:03 AM

Data Sourced

via MITRE·02:03 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The attacker needs access to an already authenticated administrator browser session. No current administrator password is required when changing the password through the vulnerable mechanism.

What is the practical impact of a successful exploit?

An attacker can set a new administrator password, lock out the legitimate administrator, and retain persistent control of the device.

Which devices are identified as affected?

The affected product is the Linksys WAG200G running firmware through version 1.01.06.

CVE-2013-20008: Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password

Affected Software

Event History

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the practical impact of a successful exploit?

Which devices are identified as affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the practical impact of a successful exploit?

Which devices are identified as affected?