CVE-2009-1561

Cross-site request forgery (CSRF) vulnerability in administration.cgi on the Cisco Linksys WRT54GC router with firmware 1.05.7 allows remote attackers to hijack the intranet connectivity of arbitrary users for requests that change the administrator password via the sysPasswd and sysConfirmPasswd parameters.

• CWE-352

• http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html
• http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txtExploit
• http://secunia.com/advisories/34805Vendor Advisory
• http://www.falandodeseguranca.com/?p=17
• http://www.securityfocus.com/bid/34616Exploit
• http://www.vupen.com/english/advisories/2009/1172Vendor Advisory
• http://archives.neohapsis.com/archives/bugtraq/2009-04/0198.html
• http://packetstormsecurity.org/0904-exploits/linksysadmin-passwd.txtExploit
• http://secunia.com/advisories/34805Vendor Advisory
• http://www.falandodeseguranca.com/?p=17
• http://www.securityfocus.com/bid/34616Exploit
• http://www.vupen.com/english/advisories/2009/1172Vendor Advisory

Published

May 6, 2009

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2009-1555The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1556img/main.cgi on the Cisco Linksys WVC54GCA wireless video ca…
• CVE-2009-1557Multiple cross-site scripting (XSS) vulnerabilities on the C…
• CVE-2009-1558Directory traversal vulnerability in adm/file.cgi on the Cis…
• CVE-2009-1559Absolute path traversal vulnerability in adm/file.cgi on the…
• CVE-2009-1560The Cisco Linksys WVC54GCA wireless video camera with firmwa…
• CVE-2009-1563Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2009-1564Heap-based buffer overflow in vmnc.dll in the VMnc media cod…
• CVE-2009-1565vmnc.dll in the VMnc media codec in VMware Movie Decoder bef…
• CVE-2009-1566Integer overflow in Roxio Easy Media Creator 9.0.136, and Ro…
• CVE-2009-1567Multiple stack-based buffer overflows in the Lateral Arts Ph…
• CVE-2009-1568Stack-based buffer overflow in ienipp.ocx in Novell iPrint C…