Unscored severity · published May 2, 2005
CVE-2005-1059
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html
–
CVSS
3.2%
EPSS
No
On KEV
Description
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.2% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WE
Wet11 · Linksys
1.4.3; 1.5.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-1059
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-1059
Vendor Advisory
http://secunia.com/advisories/14871
Exploit
http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html
Exploit
http://www.securityfocus.com/bid/13051
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/20008
More from Wet11
–
CVE-2002-2371
Linksys WET11 firmware 1.31 and 1.32 allows remote attackers to cause a denial of service (crash) via a packet containing the device's hardware address as the source MAC address…