Live › vulnerability › CVE-2013-20008
Go to dashboardLinksys WAG200G firmware through 1.01.06 lets whoever holds an authenticated administrator browser session change the admin password without entering the current one. An attacker can lock the real administrator out and keep persistent control of the device.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-28 03:31 UTC. All times on this page are UTC.
Owners of Linksys WAG200G routers running firmware through 1.01.06 that expose the web admin interface. The attack needs an already-authenticated administrator browser session, so networks where only trusted admins log in and the admin interface is not reachable from untrusted hosts are at lower risk.
No product ranges from the sources yet.
1.01.06 or earlierunknown for any other hardware revisionsEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.
This page as .md · .json · in your agent: get_signal("CVE-2013-20008")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.