CVE-2008-6975: Multiple cross-site request forgery (CSRF) vulnerabilities in apply.cgi in DD-WRT 24 sp2 allow remote attac...

Security readout for executives and security teams

DD-WRT 24 sp2 had weak protection against forged web requests. If an administrator was logged into the router interface, a malicious site could trigger sensitive router actions in that admin’s browser, including credential changes, remote administration enablement, port forwarding changes, and command execution. Exposure is limited to environments running DD-WRT 24 sp2. Risk is higher where administrators access the router UI from regular browsing sessions or where the management interface is reachable from untrusted networks. The bundle does not identify affected downstream devices or other DD-WRT versions. Treat this as a high-priority legacy router risk if DD-WRT 24 sp2 remains deployed. The business concern is router takeover through an administrator’s browser session, not broad unauthenticated internet exploitation based on the provided evidence. Mitigation focus: Check DD-WRT vendor/forum guidance for fixed builds before production use.; Move affected routers off DD-WRT 24 sp2 where vendor guidance supports it.; Restrict router administration to trusted management networks only..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.