VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Sep 14, 2005· Updated Apr 16, 2026

CVE-2005-2916

CVE-2005-2916

Description

Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.

Affected products

3
  • Linksys/Wrt54g3 versions
    cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:h:linksys:wrt54g:3.01.3:*:*:*:*:*:*:*
    • cpe:2.3:h:linksys:wrt54g:3.03.6:*:*:*:*:*:*:*
    • cpe:2.3:h:linksys:wrt54g:4.00.7:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

2

News mentions

0

No linked articles in our index yet.