CVE-2008-1268

The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an…

published March 10, 2008

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

🚨 A simple FTP session is all it takes to slip through the cracks! The Linksys WRT54G 7 router with firmware 7.00.1 allows remote attackers to access your FTP services without breaking a sweat. ⚡ Think of it like a hotel that lets guests check in without verifying their identity — anyone could waltz right into your room and take whatever they want! It's a real security oversight that shouldn't be overlooked. An attacker could easily log into the FTP server using arbitrary credentials, potentially accessing or modifying sensitive files without your knowledge. This could lead to data breaches or unwanted changes to your network settings, leaving you vulnerable to further attacks.

Put simply

Think of it like a hotel that lets guests check in without verifying their identity — anyone could waltz right into your room and take whatever they want! It's a real security oversight that shouldn't be overlooked. The vulnerability arises because the FTP server does not properly verify authentication credentials, allowing attackers to establish an FTP session with any username and password they choose.

What to do

An attacker could easily log into the FTP server using arbitrary credentials, potentially accessing or modifying sensitive files without your knowledge. This could lead to data breaches or unwanted changes to your network settings, leaving you vulnerable to further attacks. To address this, immediately upgrade your firmware to the latest version if available. Also, consider disabling the FTP service if it's not needed, and change default credentials to something unique and complex. You've got this! Take these steps, and you'll have your router secured in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02488 · 84.5th percentile
Published
2008-03-10T17:00Z
EPSS history
Timeline
  • 10 MAR 17:00Z
    The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an…
    cvelistv5