CVE-2007-4387

published 2007-08-17

CVE-2007-4387: Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to…

Priority P4 24 medium 4.3 CVSS 2.0

AV N AC M Au N C N I P A N

EXPLOIT

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
2wire	1701hg_router	—	—
2wire	1701hg_router	—	—
2wire	2071_router	—	—
2wire	2071_router	—	—

Detection & IOCs extracted from sources · hover to see the quote

path /xslt↗

• → Monitor for unauthenticated HTTP requests to the /xslt endpoint on 2Wire 1701HG and 2071 Gateway routers, which does not require authentication and can be abused to make administrative configuration changes including password resets. ↗

• · Vulnerability affects 2Wire 1701HG and 2071 Gateway routers running firmware versions 3.17.5 and 5.29.51 specifically. ↗
• · A Metasploit auxiliary module exists for this vulnerability (admin/2wire/xslt_password_reset), meaning exploitation is trivially automated and should be factored into detection priority. ↗

CVEs like this are exactly what “Exploited This Week” covers.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.