{"id":"CVE-2004-2455","aliases":["EUVD-2004-2446","GHSA-2vwc-94q4-mqwr"],"status":"published","title":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain...","description":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01705,"percentile":0.77429,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:41Z","products":[{"vendor":"sweex","product":"wireless_broadband_router_accesspoint_802.11g"}],"references":[{"url":"http://www.securityfocus.com/bid/10339","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.osvdb.org/6109","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16140","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://secunia.com/advisories/11603","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/alerts/2004/May/1010143.html","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2004-05/0574.html","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2455"},{"url":"https://github.com/advisories/GHSA-2vwc-94q4-mqwr"}],"sources":{"cve":[{"id":"CVE-2004-2455","description":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.","status":"published","published":"2005-08-20T04:00:00Z","modified":"2024-08-08T01:29:13.619Z","updated_at":"2026-11-02T14:34:53.357376Z"}],"euvd":[{"id":"EUVD-2004-2446","description":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.","status":"published","published":"2005-08-20T04:00:00Z","modified":"2024-08-08T01:29:13Z","updated_at":"2026-11-03T01:15:10.453137Z"}],"ghsa":[{"id":"GHSA-2vwc-94q4-mqwr","title":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain...","description":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.","status":"published","published":"2022-04-29T03:01:27Z","modified":"2023-01-30T05:03:47Z","updated_at":"2026-11-02T14:46:54.738868Z"}],"nvd":[{"id":"CVE-2004-2455","description":"Sweex Wireless Broadband Router/Accesspoint 802.11g (LC000060) allows remote attackers to obtain sensitive information and gain privileges by using TFTP to download the nvram file, then extracting the username, password, and other data from the file.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:41.07Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:00:53.133049Z"}]}}