CVE:CVE-2007-4389
CNNVD:CNNVD-200708-280
2wire 1701HG, 1800HW, 和 2071 Gateway routers, 以及3.17.5, 3.7.1, 和5.29.51软件的/xslt中存在跨站请求伪造漏洞。远程攻击者可以像管理员一样，可以借助NAME和ADDR参数，创建DNS绘图并执行DNS攻击。
solution:Upgrade 2wire 1701hg_router to a higher version than 3.7.1,3.17.5,5.29.51,and avoid the version 3.7.1,3.17.5,5.29.51; Upgrade 2wire 1800hw_router to a higher version than 3.7.1,3.17.5,5.29.51,and avoid the version 3.7.1,3.17.5,5.29.51; Upgrade 2wire 2071_router to a higher version than 3.7.1,3.17.5,5.29.51,and avoid the version 3.7.1,3.17.5,5.29.51