CVE-2004-2606

high

Description

The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/16274

http://www.securityfocus.com/bid/10441

http://www.securityfocus.com/archive/1/365227/30/0/threaded

http://www.securityfocus.com/archive/1/365175

http://www.osvdb.org/6577

http://www.nwfusion.com/news/2004/0607confuse.html

http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201

http://secunia.com/advisories/11754

http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html

http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html

Details

Source: Mitre, NVD

Published: 2004-12-31

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N