Vulnerabilities for Wag54gs (...) - CXSECURITY.COM

Vulnerabilities for 'Wag54gs'

2008-03-13

CVE-2007-6709

CWE-264

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.

CVE-2007-6708

CWE-352

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by (1) a Restore Factory Defaults action using the mtenRestore parameter to setup.cgi and (2) creation of a user account using the sysname parameter to setup.cgi.

CVE-2007-6707

CWE-79

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, a different issue than CVE-2007-3574.

2007-07-05

CVE-2007-3574

CWE-79

Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remote attackers to inject arbitrary web script or HTML via the (1) c4_trap_ip_, (2) devname, (3) snmp_getcomm, or (4) snmp_setcomm parameter.

>>> Vendor: Linksys 66 Products

Psus4 printserver

Wpc300n wireless-n notebook adapter driver

Wip 330 wireless-g ip phone

Spa-2102 phone adapter

Ea6500 firmware

E4200v2 firmware

Ea2700 firmware

Ea3500 firmware

Ea4500 firmware

Ea6200 firmware

Ea6300 firmware

Ea6400 firmware

Ea6700 firmware

Ea6900 firmware

Wrt1900acs firmware

Wag54g2 firmware

Re6300 firmware

Re6400 firmware

Copyright 2024, cxsecurity.com