Vulnerability Description
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/24476
- https://www.s3cur1ty.de/m1adv2013-016
- https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-admin-passw
FAQ
What is CVE-2013-20008?
CVE-2013-20008 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an...
How severe is CVE-2013-20008?
CVE-2013-20008 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2013-20008?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.