The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more…
Priority LOW 22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- —
- Confidentiality · integrity · availability
- None · Partial · None
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA.
Summary
The web server control panel in 602LAN SUITE 2004 allows remote attackers to make it more difficult for the administrator to read portions of log files via a "</pre><!-" sequence in an HTTP GET request in the logon, possibly due to a cross-site scripting (XSS) vulnerability.
Why it matters now
EPSS 0.00992 62nd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:software602:602lan_suite:2004:*:*:*:*:*:*:* | 2004 | Vulnerable | Software602 |
- cpe:2.3:a:software602:602lan_suite:2004:*:*:*:*:*:*:* Versions 2004 Vulnerable ·Software602
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2005-1909
- 2026-10-03 Alias added: GHSA-m757-m826-j8h2
References
More Software602 602lan Suite vulnerabilities
- TI-2005-01346 Directory traversal vulnerability in the mail program in 602LAN SUITE 2004.0.05.0413… CVSS 2.0MEDIUM 6.4
- TI-2005-00309 Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote… CVSS 2.0MEDIUM 5.0
- TI-2004-01378 The Telnet proxy in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers to… CVSS 2.0MEDIUM 5.0
- TI-2004-01377 The webmail service in 602 Lan Suite 2004.0.04.0909 and earlier allows remote attackers… CVSS 2.0MEDIUM 5.0
Sources
- CVE-2005-1909 · CVE Program
- CVE-2005-1909 · NVD
- FIRST EPSS
- GHSA-m757-m826-j8h2 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences