NVD

Id
1206  
Name
CVE-2008-1247  
Description
The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administrative actions via a direct request to (1) Advanced.tri, (2) AdvRoute.tri, (3) Basic.tri, (4) ctlog.tri, (5) ddns.tri, (6) dmz.tri, (7) factdefa.tri, (8) filter.tri, (9) fw.tri, (10) manage.tri, (11) ping.tri, (12) PortRange.tri, (13) ptrigger.tri, (14) qos.tri, (15) rstatus.tri, (16) tracert.tri, (17) vpn.tri, (18) WanMac.tri, (19) WBasic.tri, or (20) WFilter.tri. NOTE: the Security.tri vector is already covered by CVE-2006-5202.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-03-10  
Modified Date
2008-09-10  
Seq
2008-1247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
7703 1206 CVE-2008-1247 http://kinqpinz.info/lib/wrt54g/own.txt  View
7704 1206 CVE-2008-1247 http://www.gnucitizen.org/projects/router-hacking-challenge/  View
7705 1206 CVE-2008-1247 5313  View
7706 1206 CVE-2008-1247 5926  View
7707 1206 CVE-2008-1247 20080301 The Router Hacking Challenge is Over!  View
7708 1206 CVE-2008-1247 28381  View
7709 1206 CVE-2008-1247 linksys-wrt54g-security-bypass(41118)  View
7710 1206 CVE-2008-1247 https://kinqpinz.info/lib/wrt54g/  View
7711 1206 CVE-2008-1247 https://kinqpinz.info/lib/wrt54g/own2.txt  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
48893 JVNDB-2008-004203 Linksys WRT54g ルータ上の Web インターフェースにおける任意の管理者操作を実行される脆弱性 Linksys WRT54g ルータ上の Web インターフェースは、スクリプトを呼び出す際、資格情報を必要としないため、任意の管理者操作を実行される脆弱性が存在します。 CVE-2008-1247 31360 CVE-2008-1247 1206 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004203.html 2008-03-10 2012-09-25 View