« Volver al listado

CVE-2007-4389

Estado: ModificadaAlta (7.8)—

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

2wire — 1701hg Router2wire — 1800hw Router2wire — 2071 Router

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2007-4389",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:C",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 7.8,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2007-08-17T22:17:00.000",
  "references": [
    {
      "url": "http://securityreason.com/securityalert/3026",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.hakim.ws/2wire/demodns.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/476595/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/27246",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36044",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://securityreason.com/securityalert/3026",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.hakim.ws/2wire/demodns.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/476595/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/27246",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36044",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de falsificación de petición en sitios cruzados (CSRF) en /xslt en 2wire 1701HG, 1800HW, con software 3.17.5, 3.7.1, y 5.29.51, permite a atacantes remotos crear mapeos DNS como administradores, y realizar ataques de envenenamiento de DNS, a través de los parámetros NAME y ADDR."
    }
  ],
  "lastModified": "2026-06-16T22:43:59.280",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:2wire:1701hg_router:3.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E7B858E7-6AFB-4D24-8A4E-794BE4B351AB"
            },
            {
              "criteria": "cpe:2.3:h:2wire:1701hg_router:3.17.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "884F1148-AC2B-402B-8519-60BB39D2562B"
            },
            {
              "criteria": "cpe:2.3:h:2wire:1701hg_router:5.29.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "38F8B3DD-2F9D-4D76-AEFF-F3CA1F896163"
            },
            {
              "criteria": "cpe:2.3:h:2wire:1800hw_router:3.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA7AF0F9-8143-49BA-82F0-6D01723F3510"
            },
            {
              "criteria": "cpe:2.3:h:2wire:1800hw_router:3.17.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "528687D9-70AD-4815-A711-93FDC7E724E0"
            },
            {
              "criteria": "cpe:2.3:h:2wire:1800hw_router:5.29.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "42AF0715-98A0-46B3-8588-56B8E182A6B9"
            },
            {
              "criteria": "cpe:2.3:h:2wire:2071_router:3.7.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "014A1046-8EAC-4856-8556-9442CF463A1E"
            },
            {
              "criteria": "cpe:2.3:h:2wire:2071_router:3.17.5:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C3C3F76B-04CF-4F3E-AF94-A1709E8BC8FD"
            },
            {
              "criteria": "cpe:2.3:h:2wire:2071_router:5.29.51:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FD57A887-A1F0-471C-A905-77BDDA8190DB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}