VYPR
← All advisories
Unrated severityNVD Advisory· Published Sep 14, 2005· Updated Jun 16, 2026

CVE-2005-2916

CVE-2005-2916

Description

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.

Affected products

4
  • Linksys/Wrt54g4 versions
    cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*
    • cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*
    • cpe:2.3:h:linksys:wrt54g:4.00.7:*:*:*:*:*:*:*
    • (no CPE)range: <4.20.7

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.