7.5high

CVE-2004-1550in critical feed1 exploit

Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obt…

Published 21 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
18.6%
percentile 97%
Public exploits
1
Metasploit

Summary

Motorola Wireless Router WR850G running firmware 4.03 allows remote attackers to bypass authentication, log on as an administrator, and obtain sensitive information by repeatedly making an HTTP request for ver.asp until an administrator logs on.

Exploit prediction (EPSS)

18.61% probability of exploitation in the next 30 days, higher than 97% of all scored CVEs.

Exploits and detections

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • lists.grok.org.uk /pipermail/full-disclosure/2004-September/026791.html · mailing-list, x_refsource_FULLDISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/17474 · vdb-entry, x_refsource_XF, x_transferred
  • marc.info /?l=bugtraq&m=109613135105800&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • securityfocus.com /bid/11241 · vdb-entry, x_refsource_BID, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.