Wrt54g

Vendor:

First CVE: Aug 6, 2004 · Active for 21 years

16

Total CVEs

More Total CVEs than 93% of tracked products

3.2

Avg CVEs / Year

Higher CVE frequency than 84% of tracked products

6.7

Avg CVSS

Higher Avg CVSS than 38% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Wrt54g over time

Volume of CVEsAvg CVSS Base Score

First CVE

Aug 6, 2004

21 years ago

Most Recent CVE

Nov 22, 2011

5,362 days ago

CVE Severity & Scoring

Wrt54g16 CVEs

44%

56%

All CVEs353,173 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network0 (0.0%)

Unknown16 (100.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low0 (0.0%)

High0 (0.0%)

Unknown16 (100.0%)

User Interaction

None0 (0.0%)

Unknown16 (100.0%)

Required0 (0.0%)

Privileges Required

Low0 (0.0%)

High0 (0.0%)

None0 (0.0%)

Unknown16 (100.0%)

Top CVEs

Signals from CVEs in this product scope (16 CVEs).

16 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2005-2799HIGH Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execute arbitrary code via a long HTTP POST re	Sep 15, 2005	7.5	75	NO	YES
CVE-2008-1247HIGH The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers to perform arbitrary administr	Mar 10, 2008	10.0	41	NO	YES
CVE-2008-1268HIGH The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending	Mar 10, 2008	10.0	29	NO	NO
CVE-2004-0580MEDIUM DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet,	Aug 6, 2004	5.0	25	NO	YES
CVE-2011-4499HIGH The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 wi	Nov 22, 2011	7.5	23	NO	NO
CVE-2006-5202MEDIUM Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request	Oct 10, 2006	5.0	23	NO	YES
CVE-2008-1264HIGH The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file that lists all HTML documents	Mar 10, 2008	7.5	22	NO	NO
CVE-2008-1265HIGH The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface.	Mar 10, 2008	7.8	22	NO	NO
CVE-2004-2606HIGH The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote attackers to attempt to login to an administration web page, even when t	Dec 31, 2004	7.5	20	NO	NO
CVE-2006-2559HIGH Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP request with a modified InternalClie	May 24, 2006	7.5	19	NO	NO

View all 16 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (16 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

6.2% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

4 CVEs

25.0% of CVEs· 87th percentile

Social Chatter

Signals from CVEs in this product scope (16 CVEs).

Media Mentions

Signals from CVEs in this product scope (16 CVEs).

Top CNAs Publishing CVEs For Wrt54g

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
7	1	10.0	2.5%	0
4.00.7	3	5.8	1.3%	0
3.03.6	6	6.3	12.8%	1
3.01.3	6	6.3	12.8%	1
2.2	1	7.5	1.3%	0
2.04.4_non_default	2	6.3	1.2%	0
2.04.4	2	7.5	1.6%	0
2.02.7	2	7.5	2.1%	0
2.00.8	2	6.3	4.9%	1
1.42.3	2	6.3	4.9%	1
1.00.9	1	5.0	4.1%	1