high7.5
CVE-2006-2559
Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a …
Impact
Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linksys | Wrt54g | Versions 1.42.3, 2.00.8, 2.02.7, 2.04.4, 2.04.4_non_default, 3.01.3 |
| Linksys | Wrt54g V5 | All versions |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/20161
- http://securitytracker.com/id?1016134
- http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
- http://www.securityview.org/how-does-the-upnp-flaw-works.html
- http://www.vupen.com/english/advisories/2006/1909
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26707
- http://secunia.com/advisories/20161
- http://securitytracker.com/id?1016134
- http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
- http://www.securityview.org/how-does-the-upnp-flaw-works.html
- http://www.vupen.com/english/advisories/2006/1909
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26707