CVE-2005-2914: Linksys WRT54G

High severity, CVSS 7.5. EPSS: 1.4% chance of exploitation in the next 30 days.

ezconfig.asp in Linksys WRT54G router 3.01.03, 3.03.6, non-default configurations of 2.04.4, and possibly other versions, does not use an authentication initialization function, which allows remote attackers to obtain encrypted configuration information and, if the key is known, modify the configuration.

Affected products

• Linksys WRT54G: version 2.04.4 only; version 3.01.3 only; version 3.03.6 only

Published 2005-09-14. Last modified 2026-06-16.