Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Linksys WRT54G用户身份认证绕过漏洞
Vulnerability Description
Linksys WRT54G是Cisco公司的一款无线路由器。 Linksys WRT54G 3.01.03， 3.03.6， 4.00.7以及可能4.20.7之前的其他版本，不会验证用户身份验证，直到处理完毕HTTP POST请求以后，从而使远程攻击者能够(1)使用restore.cgi修改配置或者(2)使用upgrade.cgi上传新的固件。
CVSS Information
N/A
Vulnerability Type
N/A