CVE-2013-20008

17th percentile - higher than 17% of all known CVEs

Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.

The ability to change the password without verifying the current one enables persistent device takeover and lockout of the legitimate administrator. This poses a serious risk to network security.

Update the device firmware to a non-vulnerable version and enforce a mechanism requiring the current password for changes. Restrict access to the administrative interface and monitor for unauthorized changes.