Medium severity · published Oct 28, 2026
CVE-2013-20008
Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password
New
6.8
CVSS
–
EPSS
No
On KEV
Description
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.
CVSS vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Physical
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
WA
WAG200G · Linksys
through 1.01.06 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-20008
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-20008
third-party-advisory
https://www.s3cur1ty.de/m1adv2013-016
exploit
https://www.exploit-db.com/exploits/24476
third-party-advisory
https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-admin-password-change-without-current-password
More from WAG200G
7.2
CVE-2013-20007
Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi
4.8
CVE-2013-20009
Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter
–
CVE-2007-1585
The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attackers to obtain sensitive information…