MEDIUMCVSS v3.1 6.8Vulnerability

CVE-2013-20008

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.

Properties

Severity
MEDIUM
Nvd fetched at
2026-10-28T03:35:08.633330+00:00
Cvss severity
MEDIUM
Cvss score
6.8
Retrieved at
2026-10-28T03:36:16+00:00
Score
6.8
Cvss version
3.1
Last source
NVD
Cve id
CVE-2013-20008
Cvss vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
First seen by Signal
2026-10-28T03:36:16+00:00
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published at
2026-10-28T03:17:07.390
Last modified
2026-10-28T03:17:07.390

Related Entities (1)

HAS_WEAKNESS (1)

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2013-20008 (CVSS v3.1 6.8) — Ninja Signal Threat Intelligence | Ninja Signal