CVE-2007-4389 EXPLOIT
7.8
HIGH · CVSS 2.0 · EPSS 2.1% (pctl 81)
Patch early
A public exploit exists.
Description
Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.
Scoring
| CVSS | 7.8 (HIGH, v2.0) |
|---|---|
| Vector | AV:N/AC:M/Au:N/C:N/I:P/A:C |
| EPSS | 2.14% — more likely to be exploited than 81% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2007-08-17 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| 2wire | 1701hg router |
| 2wire | 1800hw router |
| 2wire | 2071 router |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | 2WIRE Routers - Cross-Site Request Forgery | 2008-01-15 |
References
- http://securityreason.com/securityalert/3026
- http://www.hakim.ws/2wire/demodns.html
- http://www.securityfocus.com/archive/1/476595/100/0/threaded
- http://www.securityfocus.com/bid/27246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
- http://securityreason.com/securityalert/3026
- http://www.hakim.ws/2wire/demodns.html
- http://www.securityfocus.com/archive/1/476595/100/0/threaded
- http://www.securityfocus.com/bid/27246
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
→ the Explorer · watch your stack · NVD