CVE-2008-6605

no score yetEPSS 0.9%

2wire: no CVSS score yet. EPSS 0.9% chance of exploitation in the next 30 days.

Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on the 2wire 1701HG, 1800HW, 2071HG, and 2700HG with firmware 3.17.5, 3.7.1, 4.25.19, or 5.29.51 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that cause a denial of service (network outage) via a page parameter with a % (percent) character followed by a non-alphanumeric character.

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-352
Published: 2009-04-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

2wire:1701hg
2wire:1800hw
2wire:2071hg
2wire:2700hg

References

http://osvdb.org/49835
http://www.securityfocus.com/bid/32211
https://exchange.xforce.ibmcloud.com/vulnerabilities/46537
https://www.exploit-db.com/exploits/7060
http://osvdb.org/49835

Check your stack JSON