CVE-2007-4389

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.

Link	Resource
http://www.hakim.ws/2wire/demodns.html
http://securityreason.com/securityalert/3026
http://www.securityfocus.com/bid/27246
https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
http://www.securityfocus.com/archive/1/476595/100/0/threaded

Configuration 1

cpe:2.3:h:2wire:2071_router:3.17.5:*:*:*:*:*:*:* cpe:2.3:h:2wire:1701hg_router:5.29.51:*:*:*:*:*:*:* cpe:2.3:h:2wire:2071_router:3.7.1:*:*:*:*:*:*:* cpe:2.3:h:2wire:1701hg_router:3.17.5:*:*:*:*:*:*:* cpe:2.3:h:2wire:1800hw_router:3.17.5:*:*:*:*:*:*:* cpe:2.3:h:2wire:2071_router:5.29.51:*:*:*:*:*:*:* cpe:2.3:h:2wire:1701hg_router:3.7.1:*:*:*:*:*:*:* cpe:2.3:h:2wire:1800hw_router:5.29.51:*:*:*:*:*:*:* cpe:2.3:h:2wire:1800hw_router:3.7.1:*:*:*:*:*:*:*

---

Published : 2007-08-17 10:17

Updated : 2018-10-15 09:35

---

NVD link : CVE-2007-4389

Mitre link : CVE-2007-4389

2071 Router

2wire

NVD-CWE-Other