WR
Product
WRT54G
17
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 0Medium 0Low 0
Watch
Add WRT54G to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-8408 | 9.8 | Sep 4 | Linksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflow Affected: 4.21.5 |
| CVE-2011-4499 | – | Nov 22 | The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4… Affected: 2.2 |
| CVE-2008-1265 | – | Mar 10 | The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface Affected: All versions, or not specified |
| CVE-2008-1264 | – | Mar 10 | The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML… Affected: All versions, or not specified |
| CVE-2008-1263 | – | Mar 10 | The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensitive information via an HTTP… Affected: All versions, or not specified |
| CVE-2008-1247 | – | Mar 10 | The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary… Affected: All versions, or not specified |
| CVE-2008-1268 | – | Mar 10 | The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending… Affected: 7 |
| CVE-2006-5202 | – | Oct 10 | Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct… Affected: 1.00.9 |
| CVE-2006-2559 | – | May 24 | Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified… Affected: 1.42.3; 2.00.8; 2.02.7; 2.04.4; 2.04.4_non_default; 3.01.3; +2 more |
| CVE-2005-2799 | – | Sep 15 | Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST… Affected: 3.01.3; 3.03.6 |
| CVE-2005-2916 | – | Sep 14 | Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which… Affected: 3.01.3; 3.03.6; 4.00.7 |
| CVE-2005-2915 | – | Sep 14 | ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte… Affected: 2.04.4_non_default; 3.01.3; 3.03.6 |
| CVE-2005-2914 | – | Sep 14 | ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function,… Affected: 2.04.4; 3.01.3; 3.03.6 |
| CVE-2005-2912 | – | Sep 14 | Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value Affected: 3.01.3; 3.03.6; 4.00.7 |
| CVE-2005-2434 | – | Aug 3 | Linksys WRT54G router uses the same private key and certificate for every router, which allows remote attackers to sniff the SSL connection and obtain sensitive information Affected: All versions, or not specified |
| CVE-2004-2606 | – | Dec 31 | The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when… Affected: 2.02.7 |
| CVE-2004-0580 | – | Aug 6 | DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply… Affected: 1.42.3; 2.00.8 |
Showing 17