CVE-2008-6605: Cross-site request forgery (CSRF) vulnerability in the xslt script in the web-based management interface on...

Security readout for executives and security teams

This issue affects several legacy 2Wire home or small-office gateways. A malicious webpage could cause a victim's browser to send a damaging request to the router's local management interface, resulting in a network outage. The source bundle does not provide a vendor fix or active exploitation evidence. Exposure is most likely where the listed 2Wire gateway models and firmware remain in service and their management interface is reachable from users' browsers on the intranet. This is likely a legacy-device issue rather than broad modern enterprise exposure. Treat as a targeted legacy infrastructure risk. Prioritize confirming whether these devices still exist, then replace or isolate them if present, especially at remote offices or small sites dependent on 2Wire gateways. Mitigation focus: Inventory networks for the listed 2Wire gateway models and firmware versions.; Check vendor or ISP guidance for supported firmware updates or replacement options.; Restrict access to the web management interface to trusted administration hosts..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.