CVE-2002-2159

Published: Dec 31, 2002Modified: Apr 16, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.

Affected (3)

Products: Linksys: Befsr11, Befsr41, Befsru31

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Linksys Befsr11	Version 1.42.7
Linksys Befsr41	Version 1.42.7
Linksys Befsru31	Version 1.42.7

References (6)

http://www.iss.net/security_center/static/9330.php

Source: cve@mitre.org

http://www.securiteam.com/securitynews/5OP022K7GE.html

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/4987

Source: cve@mitre.org

http://www.iss.net/security_center/static/9330.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securiteam.com/securitynews/5OP022K7GE.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/bid/4987

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.