Description
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.
Published: 2026-10-28
Score: 7 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Wed, 28 Oct 2026 02:30:00 +0000

Type Values Removed Values Added
Description Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.
Title Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password
First Time appeared Linksys
Linksys wag200g
Weaknesses CWE-620
CPEs cpe:2.3:h:linksys:wag200g:*:*:*:*:*:*:*:*
Vendors & Products Linksys
Linksys wag200g
References
Metrics cvssV3_1

{'score': 6.8, 'vector': 'CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H'}

cvssV4_0

{'score': 7, 'vector': 'CVSS:4.0/AV:P/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N'}

Subscriptions

Linksys Wag200g
cve-icon MITRE

Status: PUBLISHED

Assigner: VulnCheck

Published:

Updated: 2026-10-28T02:03:11.024Z

Reserved: 2026-10-27T21:50:43.346Z

Link: CVE-2013-20008

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Received

Published: 2026-10-28T03:17:07.390

Modified: 2026-10-28T03:17:07.390

Link: CVE-2013-20008

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses
  • CWE-620

    Unverified Password Change