CVE:CVE-2008-6605
CNNVD:CNNVD-200904-078
装载了固件3.17.5、3.7.1、4.25.19或5.29.51的2wire 1701HG, 1800HW, 2071HG和2700HG上的web管理界面中的xslt脚本存在跨站请求伪造漏洞。远程攻击者可以借助一个页参数，劫持任意用户的内网连接请求。该请求会造成拒绝服务攻击(网络损耗)。而这个页参数带有一个%字符，紧跟在%字符后面的是一个非文字数字的字符。
solution:Upgrade 2wire 1701hg to a higher version than 3.7.1,3.17.5,4.25.19,5.29.51,and avoid the version 3.7.1,3.17.5,4.25.19,5.29.51; Upgrade 2wire 1800hw to a higher version than 3.7.1,3.17.5,4.25.19,5.29.51,and avoid the version 3.7.1,3.17.5,4.25.19,5.29.51; Upgrade 2wire 2071hg to a higher version than 3.7.1,3.17.5,4.25.19,5.29.51,and avoid the version 3.7.1,3.17.5,4.25.19,5.29.51; Upgrade 2wire 2700hg to a higher version than 3.7.1,3.17.5,4.25.19,5.29.51,and avoid the version 3.7.1,3.17.5,4.25.19,5.29.51