7.8high
CVE-2007-43891 exploit
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51…
Published 19 y ago · modified 4 mo ago · JSON
CVSS
7.8
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
2.1%
percentile 82%
Public exploits
1
Exploit-DB
Summary
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.
Exploit prediction (EPSS)
2.14% probability of exploitation in the next 30 days, higher than 82% of all scored CVEs.
Exploits and detections
- EDB-31013 2WIRE Routers - Cross-Site Request Forgery · remote · 2008-01-15
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 7.8 | AV:N/AC:M/Au:N/C:N/I:P/A:C |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/36044 · vdb-entry, x_refsource_XF, x_transferred
- securityreason.com /securityalert/3026 · third-party-advisory, x_refsource_SREASON, x_transferred
- securityfocus.com /archive/1/476595/100/0/threaded · mailing-list, x_refsource_BUGTRAQ, x_transferred
- securityfocus.com /bid/27246 · vdb-entry, x_refsource_BID, x_transferred
- hakim.ws /2wire/demodns.html · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2007-4389
- NVD: CVE-2007-4389
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.