CVE-2007-6708

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote…

published March 13, 2008

CVSS
—
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote attackers to perform actions as administrators via an arbitrary valid request to an administrative URI, as demonstrated by (1) a Restore Factory Defaults action using the mtenRestore parameter to setup.cgi and (2) creation of a user account using the sysname parameter to setup.cgi.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00638 · 49.9th percentile
Published
2008-03-13T18:00Z
EPSS history
Timeline
  • 13 MAR 18:00Z
    Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remote…
    cvelistv5