Unscored severity · published Aug 3, 2005
CVE-2005-2434
Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information
–
CVSS
0.9%
EPSS
No
On KEV
Description
Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 58% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WR
Wrt54g · Linksys
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-2434
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-2434
marc.info
http://marc.info/?l=bugtraq&m=112258422806340&w=2
secunia.com
http://secunia.com/advisories/16271
securitytracker.com
http://securitytracker.com/id?1014596
www.securityfocus.com
http://www.securityfocus.com/bid/14407
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/21635
More from Wrt54g
9.8
CVE-2024-8408
Linksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflow
–
CVE-2011-4499
The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4…
–
CVE-2008-1265
The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface
–
CVE-2008-1264
The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML…
–
CVE-2008-1263
The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP…