CVE-2007-4389

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-17 · updated 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in /xslt in 2wire 1701HG, 1800HW, and 2071 Gateway routers, with 3.17.5, 3.7.1, and 5.29.51 software, allows remote attackers to create DNS mappings as administrators, and conduct DNS poisoning attacks, via the NAME and ADDR parameters.

Affected products

2Wire 1701Hg Router: 3.7.1, 3.17.5, 5.29.51
2Wire 1800Hw Router: 3.7.1, 3.17.5, 5.29.51
2Wire 2071 Router: 3.7.1, 3.17.5, 5.29.51

References

http://securityreason.com/securityalert/3026
http://www.hakim.ws/2wire/demodns.html
http://www.securityfocus.com/archive/1/476595/100/0/threaded
http://www.securityfocus.com/bid/27246
https://exchange.xforce.ibmcloud.com/vulnerabilities/36044
http://securityreason.com/securityalert/3026
http://www.hakim.ws/2wire/demodns.html
http://www.securityfocus.com/archive/1/476595/100/0/threaded
http://www.securityfocus.com/bid/27246
https://exchange.xforce.ibmcloud.com/vulnerabilities/36044

Get alerted when CVE-2007-4389 or the next vulnerability affects your stack