CVE-2007-4387: Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5

This week

MEDIUM 4.3MITIGATEMITIGATE

CVE-2007-4387 is a medium-severity flaw (CVSS 4.3) affecting 1701hg router, 2071 router. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.

Why this priority

EPSS top 5%: very likely to be exploited
Public exploit reference

No fix is published yet: follow the downgrade or mitigation steps.

Risk facts

CVSS score	4.3 (Medium)
EPSS exploit chance	9.2% (top 5%)
CISA exploited list	No
Published	2007-08-17
Last modified	2026-06-16

Publisher (CNA): MITRE · Vendor: 2wire

Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score

Am I affected?

Timeline

2007-08-17 22:17 UTCPublished CVE record published
2026-06-16 22:43 UTCUpdated Record last modified

2wire 1701hg router MITIGATE

Affected: 3.17.5 · 5.29.51

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.17.5

Firmware

Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.

2wire 2071 router MITIGATE

Affected: 3.17.5 · 5.29.51

Fixed in: no fixed release known

Safe to downgrade to: a release before 3.17.5

Firmware

Install the latest firmware from the vendor advisory; if none, apply the vendor workaround.

Public exploits and detection

Public code exists for this CVE. Treat unpatched systems as at risk, and only run PoCs in a lab.

Metasploit: 2Wire Cross-Site Request Forgery Password Reset Vulnerability

Verify at the official source NVD · CVE Program · Report a problem with this page
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.

Quick answers

How do I fix CVE-2007-4387?

1701hg router: mitigate or apply the listed mitigation; 2071 router: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.

Is CVE-2007-4387 being exploited?

CVE-2007-4387 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.

What does CVE-2007-4387 affect?

CVE-2007-4387 affects 1701hg router, 2071 router. Severity is medium (CVSS 4.3). Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5 and 5.29.51 software, allows remote attackers to perform certain configuration changes as administrators.

How urgent is CVE-2007-4387?

Priority 44/100. EPSS top 5%: very likely to be exploited; Public exploit reference

Related CVEs

CVE-2007-4389 HIGH 7.8 MITIGATE MITIGATE Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, wi
CVE-2007-4388 HIGH 10.0 MITIGATE MITIGATE 2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by def

References

← Back to latest CVEs