Every CVE Search/ Get API key

CVE-2005-1059

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original...

2.1 LowPublic exploit

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.

Exploit likelihood

3.19%Up 1.2 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.1

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.

Record
CVE-2005-1059
CVSS 2.0
2.1 LowAV:L/AC:L/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.

Record
CVE-2005-1059
Updated
2026-11-02
EUVDEUVD-2005-1062 No score

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.

Record
EUVD-2005-1062
Updated
2026-11-03
GitHub AdvisoriesGHSA-5294-7r6c-hj6h No score

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original...

Linksys WET11 1.5.4 allows remote attackers to change the password without providing the original password via the data parameter to changepw.html.

Record
GHSA-5294-7r6c-hj6h
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBLinksys WET11 - Password Update Remote Authentication Bypass2005-04-07

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2005-1059 is a low vulnerability (CVSS 2.1) in Linksys Wet11, published April 12, 2005. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 3.19%, the 88th percentile. No source names a fixed version.

References

MoveEnter Open