1. CVE-Search
  2. CVE-2007-4389
ID CVE-2007-4389
Summary Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.
References
Vulnerable Configurations
  • cpe:2.3:h:2wire:1701hg_router:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:1701hg_router:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:1701hg_router:3.17.5:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:1701hg_router:3.17.5:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:1701hg_router:5.29.51:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:1701hg_router:5.29.51:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:1800hw_router:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:1800hw_router:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:1800hw_router:3.17.5:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:1800hw_router:3.17.5:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:1800hw_router:5.29.51:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:1800hw_router:5.29.51:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:2071_router:3.7.1:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:2071_router:3.7.1:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:2071_router:3.17.5:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:2071_router:3.17.5:*:*:*:*:*:*:*
  • cpe:2.3:h:2wire:2071_router:5.29.51:*:*:*:*:*:*:*
    cpe:2.3:h:2wire:2071_router:5.29.51:*:*:*:*:*:*:*
CVSS
Base: 7.8 (as of 15-10-2018 - 21:35)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK MEDIUM NONE
Impact
ConfidentialityIntegrityAvailability
NONE PARTIAL COMPLETE
cvss-vector via4 AV:N/AC:M/Au:N/C:N/I:P/A:C
refmap via4
bid 27246
bugtraq 20070815 Cross Site Request Forgery in 2wire routers
misc http://www.hakim.ws/2wire/demodns.html
sreason 3026
xf 2wire-xslt-csrf(36044)
Last major update 15-10-2018 - 21:35
Published 17-08-2007 - 22:17
Last modified 15-10-2018 - 21:35
Back to Top