CVE-2004-2606: The Web interface in Linksys WRT54G 2.02.7 and BEFSR41 version 3, with the firewall disabled, allows remote...

Security readout for executives and security teams

This old Linksys router issue means the admin login page could be reachable from the internet even when remote administration was set to disabled, but only under the stated condition that the firewall was disabled. That creates password-guessing exposure, not confirmed device takeover by itself. Exposure is most plausible for legacy Linksys WRT54G 2.02.7 or BEFSR41 version 3 devices with firewall disabled and WAN reachability to the management interface. Treat this as legacy edge-device hygiene. It is not KEV-listed, but internet-exposed router administration can create outsized business risk if old devices still protect offices or small sites. Mitigation focus: Identify and retire unsupported Linksys WRT54G and BEFSR41 devices.; Keep the router firewall enabled where these devices remain in use.; Do not expose web administration on the WAN side..

Prepared

Jun 29, 2026, 16:46 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.