low2.1Public exploit code
CVE-2005-1059
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linksys WET11 - Password Update Remote Authentication Bypass2005-04-07 · remote · hardware · Verified
Impact
Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linksys | Wet11 | All versions Versions 1.4.3, 1.5.4 |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/14871
- http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html
- http://www.securityfocus.com/bid/13051
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20008
- http://secunia.com/advisories/14871
- http://www.derkeiler.com/Mailing-Lists/Full-Disclosure/2005-04/0148.html
- http://www.securityfocus.com/bid/13051
- https://exchange.xforce.ibmcloud.com/vulnerabilities/20008