Vulnerabilities > CVE-2006-2559 - Unspecified vulnerability in Linksys Wrt54G and Wrt54G V5

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

linksys

NVD

Published: 2006-05-24

Updated: 2024-02-14

Summary

Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClient parameter, which is not validated, as demonstrated by using AddPortMapping to forward arbitrary traffic.

Vulnerable Configurations

Part	Description	Count
Hardware	Linksys Linksys Wrt54G 2.04.4_Non_Default Linksys Wrt54G 2.04.4 Linksys Wrt54G 2.02.7 Linksys Wrt54G 4.00.7 Linksys Wrt54G 3.01.3 Linksys Wrt54G 3.03.6 Linksys Wrt54G 1.42.3 Linksys Wrt54G 2.00.8 Linksys Wrt54G V5 *	9

References

http://www.securityview.org/dutch-student-finds-a-bug-in-upnp.html
http://www.securityview.org/how-does-the-upnp-flaw-works.html
http://secunia.com/advisories/20161
http://securitytracker.com/id?1016134
http://www.vupen.com/english/advisories/2006/1909
https://exchange.xforce.ibmcloud.com/vulnerabilities/26707