PT-2006-3505 · Linksys · Linksys Wrt54Gl Wireless-G Broadband Router

CVE-2006-2559

·

Publicado

2006-05-24

·

Atualizado

2024-02-14

CVSS v2.0

7.5

Alta

VetorAV:N/AC:L/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Linksys WRT54G Wireless-G Broadband Router (affected versions not specified)
Description The issue allows remote attackers to bypass access restrictions and conduct unauthorized operations. This is achieved via a UPnP request with a modified InternalClient parameter, which is not validated. For example, an attacker can use the AddPortMapping function to forward arbitrary traffic.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-2559

Produtos afetados

Linksys Wrt54Gl Wireless-G Broadband Router