---
id: "CVE-2013-20008"
kind: "vulnerability"
aliases: ["CVE-2013-20008"]
title: "Linksys WAG200G router: admin password changeable without current password"
severity: "high"
cvss: 7.0
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["embedded", "infrastructure", "linksys", "routers", "self-hosted", "wag200g"]
not_affected_if: ["firmware-newer-than-1.01.06", "no-admin-session-exposure"]
published_at: "2026-10-28T03:17:07+00:00"
first_seen_at: "2026-10-28T03:31:01+00:00"
updated_at: "2026-10-28T03:32:35+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2013-20008", "first_seen_at": "2026-10-28T03:31:01+00:00"}]
---

# Linksys WAG200G router: admin password changeable without current password

Linksys WAG200G firmware through 1.01.06 lets whoever holds an authenticated administrator browser session change the admin password without entering the current one. An attacker can lock the real administrator out and keep persistent control of the device.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the firmware version on the device admin page against `1.01.06` or earlier
- Confirm the model is WAG200G with `unknown` for any other hardware revisions

## Fix

- No vendor fix is stated in the sources: unknown
- Replace or isolate the device if no patched firmware exists
- Restrict the admin interface to trusted hosts and change the admin password after any suspected session exposure

## Timeline

- 2026-10-28T03:31:01+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2013-20008

## From the sources

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_