Approved changes feed: RSS · Atom
cpe:2.3:h:linksys:wag200g:*:*:*:*:*:*:*:*part: h version: * update: *
| Vendor | Linksys (6d3f2e7c-48a8-5a19-9a98-85960b5ae3c2) |
|---|---|
| Product | Wag200G (bb0d7424-81ae-5ccf-b02e-f91fd087424e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-20007 |
vulnerable | 2026-11-03 10:28:47.328773 |
Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi
HIGH (7.2)
Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and run a backdoor, gaining full device control.
Published: 2026-10-28T02:03:10.353Z
Updated: 2026-11-05T15:30:56.238Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-20009 |
vulnerable | 2026-11-03 10:28:47.321180 |
Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter
MEDIUM (4.8)
Linksys WAG200G through 1.01.06 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject scripts via the policy_name parameter in setup.cgi. Attackers can save a malicious policy name from the AccessRes.htm page that executes in administrators' browsers when viewing the Status > Wireless page.
Published: 2026-10-28T02:03:11.721Z
Updated: 2026-11-03T12:30:58.377Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-20008 |
vulnerable | 2026-11-03 10:28:47.315629 |
Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password
MEDIUM (6.8)
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.
Published: 2026-10-28T02:03:11.024Z
Updated: 2026-11-02T19:50:18.154Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.