NetSight
IP …
high7.8Public exploit code

CVE-2007-4389

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows re…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.

Affected products

VendorProductAffected versions
2wire1701hg Router
Versions 3.7.1, 3.17.5, 5.29.51
2wire1800hw Router
Versions 3.7.1, 3.17.5, 5.29.51
2wire2071 Router
Versions 3.7.1, 3.17.5, 5.29.51

References