CVE-2005-2799: linksys wrt54g

EPSS trend

Probability

70.75%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 70.75% on 22-09-2026

22-09-202622-10-2026

EPSS score

70.75%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

4 found

MetasploitremoteVerified
Linksys WRT54 Access Point apply.cgi Buffer Overflow
exploit/linux/http/linksys_apply_cgi
Maturity: weaponized
MetasploitremoteUnverified
Linksys WRT54GL apply.cgi Command Execution
exploit/linux/http/linksys_wrt54gl_apply_exec
Maturity: poc
exploit-databaseremotecgiVerified
Linksys WRT54G < 4.20.7 / WRT54GS < 1.05.2 - 'apply.cgi' Remote Buffer Overflow (Metasploit)
Maturity: weaponized

Show all 4 exploits

exploit-databaseremotehardwareVerified
Linksys WRT54 Access Point - 'apply.cgi' Remote Buffer Overflow (Metasploit)
Maturity: weaponized

References

1 links

www.idefense.com/application/poi/display?id=305&type=vulnerabilitiesThird Party AdvisoryX Refsource IDEFENSEPatchVendor Advisory

Related vulnerabilities

CVE-2005-2916linksyswrt54g1.08%21y ago14-09-2005 04:00Linksys WRT54G 3.01.03, 3.03.6, 4.00.7, and possibly other versions before 4.20.7, does not verify user authentication until after an HTTP POST request has been processed, which allows remote attackers to (1) modify configuration using restore.cgi or (2) upload new firmware using upgrade.cgi.CVE-2005-2912linksyswrt54g1.24%21y ago14-09-2005 04:00Linksys WRT54G router allows remote attackers to cause a denial of service (CPU consumption and server hang) via an HTTP POST request with a negative Content-Length value.CVE-2005-2914linksyswrt54g1.41%21y ago14-09-2005 04:00ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration.CVE-2005-2915linksyswrt54g0.61%21y ago14-09-2005 04:00ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, uses weak encryption (XOR encoding with a fixed byte mask) for configuration information, which could allow attackers to decrypt the information and possibly re-encrypt it in conjunction with CVE-2005-2914.CVE-2008-1268linksyswrt54g2.49%18y ago10-03-2008 17:00The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establish an FTP session by sending an arbitrary username and password.CVE-2011-4499ciscolinksys_wrt54g_router_firmware+31.31%14y ago22-11-2011 11:00The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before 1.06.1 allows remote attackers to establish arbitrary port mappings by sending a UPnP AddPortMapping action in a SOAP request to the WAN interface, related to an "external forwarding" vulnerability.

All vulnerabilities inwrt54g

CVE-2005-2799: linksys wrt54g

Vulnerability summary

Advisory lineage

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References