2wire Archives - CVE Vulnerability

CVE-2008-6605

Sun, 26 Feb 2023 09:11:36 +0000

Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that cause a denial of service (network outage) via a page parameter with a % (percent) character followed by a non-alphanumeric character.

The post CVE-2008-6605 appeared first on CVE Vulnerability.

CVE-2007-4387

Sun, 26 Feb 2023 09:07:12 +0000

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.

The post CVE-2007-4387 appeared first on CVE Vulnerability.

CVE-2007-4388

Sun, 26 Feb 2023 09:07:12 +0000

2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.

The post CVE-2007-4388 appeared first on CVE Vulnerability.

CVE-2007-4389

Sun, 26 Feb 2023 09:07:12 +0000

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.

The post CVE-2007-4389 appeared first on CVE Vulnerability.