CVE-2007-4387

2wire 3.17.5-5.29.51 - CSRF

Title source: llm

Description

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.

Exploits (1)

metasploit WORKING POC

rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/2wire/xslt_password_reset.rb

View Code ZIP pw:eip

References (5)

[Third Party Advisory, VDB Entry] http://osvdb.org/37667

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/36044

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/476595/100/0/threaded

[Third Party Advisory] http://secunia.com/advisories/26496

[Third Party Advisory] http://securityreason.com/securityalert/3026

Scores

EPSS 0.5752

EPSS Percentile 98.2%

Details

Status published

Products (4)

2wire/1701hg_router 3.17.5

2wire/1701hg_router 5.29.51

2wire/2071_router 3.17.5

2wire/2071_router 5.29.51

Published Aug 17, 2007

Tracked Since Feb 18, 2026