CVE-2009-1561 Cross-site request forgery in n/a
Remote attackers can hijack user sessions to change the administrator password on Cisco Linksys WRT54GC routers via CSRF.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2009-1561?
CVE-2009-1561 is a medium-severity vulnerability in n/a, published on 6 May 2009. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters.
Weakness: CWE-352
Which versions are affected by CVE-2009-1561?
It affects 1 product.
Products include Cisco Wrt54gc.
How do I fix CVE-2009-1561?
No fix has been published for CVE-2009-1561 yet. Limit exposure of the affected software until one is available.
Is CVE-2009-1561 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2009-1561 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-fwr7-55rh-9m99.