CVE-2006-5202: Linksys WRT54G

Medium severity, CVSS 5.0. EPSS: 4.1% chance of exploitation in the next 30 days.

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary configurations via a direct request to Security.tri, as demonstrated using the SecurityMode and layout parameters, a different issue than CVE-2006-2559.

Affected products

• Linksys WRT54G: version 1.00.9 only

Published 2006-10-10. Last modified 2026-06-16.