CVE-2004-2606

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.57%

Published

Dec 31, 2004

Modified

Jun 16, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when the configuration specifies that remote administration is disabled.

Affected Products (2)

linksys · befsr41_v3vulnerable

linksys · wrt54gvulnerable

References (20)

ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip

Patch

http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html

http://secunia.com/advisories/11754

PatchVendor Advisory

http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201

Patch

http://www.nwfusion.com/news/2004/0607confuse.html

http://www.osvdb.org/6577

http://www.securityfocus.com/archive/1/365175

http://www.securityfocus.com/archive/1/365227/30/0/threaded

http://www.securityfocus.com/bid/10441

Patch

https://exchange.xforce.ibmcloud.com/vulnerabilities/16274

ftp://ftp.linksys.com/pub/network/wrt54g_2.02.8_US_code_beta.zip

Patch

http://archives.neohapsis.com/archives/bugtraq/2004-05/0316.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0002.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0020.html

http://archives.neohapsis.com/archives/bugtraq/2004-06/0190.html

http://secunia.com/advisories/11754

PatchVendor Advisory

http://web.archive.org/web/20040823075750/http://www.linksys.com/download/firmware.asp?fwid=201

Patch

KEV Catalog EPSS Scores Vendors All CVEs