CVE-2008-0228 — Cross-Site Request Forgery in Linksys Wrt54gl

CWE-352 — Cross-Site Request Forgery3 documents3 sources

Severity

9.3CRITICALNVD

EPSS

1.8%

top 17.15%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Linksys Wrt54gl

Timeline

PublishedJan 10

Latest updateMay 1

Description

Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote attackers to perform actions as administrators.

CVSS vector

AV:N/AC:M/C:C/I:C/A:CExploitability: 8.6 | Impact: 10.0

Affected Packages1 packages

▶NVDlinksys/wrt54gl4.30.9

🔴Vulnerability Details

GHSA

GHSA-qx67-gpjc-2m3h: Cross-site request forgery (CSRF) vulnerability in apply↗2022-05-01

▶

CVEList

CVE-2008-0228: Cross-site request forgery (CSRF) vulnerability in apply↗2008-01-10

▶