CVE-2006-2559

Опубликовано: 24 мая 2006

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.

Ссылки

http://secunia.com/advisories/20161
Patch
Vendor Advisory
http://securitytracker.com/id?1016134
http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
URL Repurposed
http://www.securityview.org/how-does-the-upnp-flaw-works.html
URL Repurposed
http://www.vupen.com/english/advisories/2006/1909
https://exchange.xforce.ibmcloud.com/vulnerabilities/26707
http://secunia.com/advisories/20161
Patch
Vendor Advisory
http://securitytracker.com/id?1016134
http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
URL Repurposed
http://www.securityview.org/how-does-the-upnp-flaw-works.html
URL Repurposed
http://www.vupen.com/english/advisories/2006/1909
https://exchange.xforce.ibmcloud.com/vulnerabilities/26707

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:h:linksys:wrt54g:1.42.3:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:2.00.8:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:2.02.7:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:2.04.4:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:2.04.4_non_default:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g:4.00.7:*:*:*:*:*:*:*

cpe:2.3:h:linksys:wrt54g_v5:*:*:*:*:*:*:*:*

EPSS

Процентиль: 67%

0.00552

Низкий

7.5 High

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-jqwg-4qw8-r2cj

github

почти 4 года назад