PatchTheCVE2wire vulnerabilities
Recent CVEs affecting 2wire products. 6 tracked.
2wire has 6 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2009-11-17. Highest priority: CVE-2009-3962 (score 54/100).
- CVE-2009-3962 HIGH 7.8 UPGRADE UPGRADE The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software
- CVE-2008-6605 MEDIUM 6.8 MITIGATE MITIGATE Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on th
- CVE-2007-4389 HIGH 7.8 MITIGATE MITIGATE Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, wi
- CVE-2007-4388 HIGH 10.0 MITIGATE MITIGATE 2wire 1701HG and 2071 Gateway routers, with 5.29.51 and possibly 3.17.5 software, have a blank password by def
- CVE-2007-4387 MEDIUM 4.3 MITIGATE MITIGATE Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG and 2071 Gateway routers, with 3.17.5
- CVE-2004-2749 MEDIUM 4.3 DOWNGRADE Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and
FAQ
How do I fix 2wire vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is 2wire being exploited right now?
None of the tracked 2wire CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which 2wire CVE should I patch first?
CVE-2009-3962 currently ranks highest (54/100): The management interface on the 2wire Gateway 1700HG, 1701HG, 1800HW, 2071, 2700HG, and 2701HG-T with software.