CVE-2013-20008
Received Received - Intake

Weak Password Change Mechanism in Linksys WAG200G

Publication date: 2026-10-28

Last updated on: 2026-10-28

Assigner: VulnCheck

Description
Linksys WAG200G through 1.01.06 contains a weak password change mechanism that allows attackers to change the administrator password without supplying the current password. Attackers with access to an authenticated administrator browser session can set a new password to lock out the legitimate administrator and take persistent device control.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-28
Last Modified
2026-10-28
Generated
2026-10-28
AI Q&A
2026-10-28
EPSS Evaluated
N/A
NVD
CVE-2013-20008
EUVD
EUVD-2013-7302

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
Linksys WAG200G 0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-620 When setting a new password for a user, the product does not require knowledge of the original password, or using another form of authentication.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

Linksys WAG200G routers with firmware up to 1.01.06 have a weak password change mechanism. Attackers with access to an authenticated admin browser session can change the admin password without knowing the current one. This locks out the legitimate admin and allows persistent device control.

Detection Guidance

Detecting this vulnerability requires checking if your Linksys WAG200G router is running firmware version 1.01.06 or earlier. Log in to the router's admin panel and navigate to the firmware version section. Alternatively, use network scanning tools to identify the device model and firmware version.

Impact Analysis

An attacker could take full control of your router, lock you out, and use it for malicious activities like intercepting network traffic or launching attacks. This could expose your network to further security risks.

Mitigation Strategies

Immediately update the router's firmware to the latest version if available. If no update exists, consider replacing the device with a newer model that has vendor-supported security patches. Disable remote administration to reduce exposure.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2013-20008. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart