CVE-2004-2749

MEDIUM 4.3CVE-2004-2749 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-2749 is a MEDIUM (CVSS 4.3) vulnerability affecting homeportal (2wire).
Chance of exploitation in the next 30 days (EPSS): 2.3%, higher than 83.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
homeportal 2wire	`= 1000= 1000s= 1000sw= 1000w= 100s= 100w= 1500w`	No fix yet

Description

Directory traversal vulnerability in wra/public/wralogin in 2Wire Gateway, possibly as used in HomePortal and other product lines, allows remote attackers to read arbitrary files via a .. (dot dot) in the return parameter. NOTE: this issue was reported as XSS, but this might be a terminology error.

References

archives.neohapsis.com/archives/bugtraq/2004-01/0179.html · Exploit
secunia.com/advisories/10666
securitytracker.com/id
osvdb.org/3683 · Exploit
securityfocus.com/bid/9463 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/14894

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free