Priority MEDIUM 40
The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software before 5.29.52 allows remote attackers to cause a denial of service (reboot) via a %0d%0a sequence in the pag…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.03016 · Published 2009-11-17 · No fix listed CWE-20
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote atta…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00936 · Published 2009-04-06 · No fix listed CWE-352
Priority LOW 24
Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a ..
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02295 · Published 2007-11-14 · No fix listed CWE-22
Priority LOW 38
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and…
CVSS 2.0HIGH 7.8· Network · No auth · Interaction — · EPSS 0.02138 · Published 2007-08-17 · No fix listed
Priority MEDIUM 46
2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by default.
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.01446 · Published 2007-08-17 · No fix listed
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.09203 · Published 2007-08-17 · No fix listed