Unscored severity · published Dec 31, 2002
CVE-2002-2159
Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and…
–
CVSS
2.4%
EPSS
No
On KEV
Description
Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.4% · higher than 84% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Befsr11 · Linksys
1.42.7 · source: NVD
BE
Befsr41 · Linksys
1.42.7 · source: NVD
BE
Befsru31 · Linksys
1.42.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-2159
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-2159
www.iss.net
http://www.iss.net/security_center/static/9330.php
Vendor Advisory
http://www.securiteam.com/securitynews/5OP022K7GE.html
www.securityfocus.com
http://www.securityfocus.com/bid/4987
More from Befsr11
–
CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply…
–
CVE-2002-1312
Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware…