CyberSec.Space Logo
返回 CVE 浏览器

CVE-2007-4387

MEDIUM
4.3
CVSS Severity Score
EPSS Score0.0300%
EPSS Percentile29.23th
Published2007年8月17日
Last Modified2026年4月23日

Vulnerability Description

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.

Affected Platforms (CPE)

🔌
2wire

1701hg Router

= 3.17.5
🔌
2wire

1701hg Router

= 5.29.51
🔌
2wire

2071 Router

= 3.17.5
🔌
2wire

2071 Router

= 5.29.51

References & Advisories

🔗 http://osvdb.org/37667
🔗 http://secunia.com/advisories/26496
🔗 http://securityreason.com/securityalert/3026
🔗 http://www.securityfocus.com/archive/1/476595/100/0/threaded
🔗 https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
🔗 http://osvdb.org/37667
🔗 http://secunia.com/advisories/26496
🔗 http://securityreason.com/securityalert/3026

相关漏洞威胁

CVE-2007-438810.0

2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.

CVE-2007-43897.8

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, an...

CVE-2007-350010.0

Xeweb XEForum allows remote attackers to gain privileges via a modified xeforum cookie.

CVE-2007-182210.0

Alcatel-Lucent Lucent Technologies voice mail systems allow remote attackers to retrieve or remove messages, or reconfigure mailbo...