CVE-2006-5202: wrt54g — Exploit & Fix

Description

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.

Is your site exposed to CVE-2006-5202?

Run a free security scan — no signup, results in seconds.

Affected Products

Vendor	Product	Versions
linksys	wrt54g	All

References

Advisories & Patches

http://secunia.com/advisories/21372 http://secunia.com/advisories/21372

Exploits

http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html http://securitytracker.com/id?1016638 http://www.securityfocus.com/bid/19347 http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html http://securitytracker.com/id?1016638 http://www.securityfocus.com/bid/19347

Other References

http://www.kb.cert.org/vuls/id/930364 https://kinqpinz.info/lib/wrt54g/ https://kinqpinz.info/lib/wrt54g/own2.txt https://www.exploit-db.com/exploits/5926 http://www.kb.cert.org/vuls/id/930364 https://kinqpinz.info/lib/wrt54g/ https://kinqpinz.info/lib/wrt54g/own2.txt https://www.exploit-db.com/exploits/5926

Frequently Asked Questions

What is CVE-2006-5202? +

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.

What products are affected by CVE-2006-5202? +

CVE-2006-5202 affects products from linksys, specifically: wrt54g. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2006-5202? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2008-1247

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows …

CVE-2025-45489 9.8

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter.

CVE-2025-45488 9.8

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter.

CVE-2025-45491 9.8

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter.

CVE-2025-45487 9.8

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.

CVE-2024-57223 9.8

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.

CVE-2006-5202