Unscored severity · published Dec 31, 2004
CVE-2004-2606
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when…
–
CVSS
2.6%
EPSS
No
On KEV
Description
The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BV
Befsr41 V3 · Linksys
All versions, or not specified · source: NVD
WR
Wrt54g · Linksys
2.02.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2606
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2606
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html
Patch
http://secunia.com/advisories/11754