CVE-2006-5202: wrt54g — Exploit & Fix

Description

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.

Is your site exposed to CVE-2006-5202?

Run a free security scan — no signup, results in seconds.

Affected Products

Vendor	Product	Versions
linksys	wrt54g	All

References

Advisories & Patches

http://secunia.com/advisories/21372 http://secunia.com/advisories/21372

Exploits

http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html http://securitytracker.com/id?1016638 http://www.securityfocus.com/bid/19347 http://lists.grok.org.uk/pipermail/full-disclosure/2006-August/048495.html http://securitytracker.com/id?1016638 http://www.securityfocus.com/bid/19347

Other References

http://www.kb.cert.org/vuls/id/930364 https://kinqpinz.info/lib/wrt54g/ https://kinqpinz.info/lib/wrt54g/own2.txt https://www.exploit-db.com/exploits/5926 http://www.kb.cert.org/vuls/id/930364 https://kinqpinz.info/lib/wrt54g/ https://kinqpinz.info/lib/wrt54g/own2.txt https://www.exploit-db.com/exploits/5926

Frequently Asked Questions

What is CVE-2006-5202? +

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.

What products are affected by CVE-2006-5202? +

CVE-2006-5202 affects products from linksys, specifically: wrt54g. Check the affected products table above for specific version ranges.

How do I check if I'm vulnerable to CVE-2006-5202? +

You can use Secably's free Website Scanner to check your website for known vulnerabilities. For infrastructure scanning, use the Port Scanner to identify exposed services that may be affected. Check the vendor advisories linked above for specific patch and version information.

Related Vulnerabilities

CVE-2008-1247

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows …

CVE-2025-29229 9.8

linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.

CVE-2025-44654 9.8

In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access …

CVE-2024-57225 9.8

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.

CVE-2025-29228 9.8

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

CVE-2025-45488 9.8

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter.

CVE-2006-5202