CVE-2008-4296

CRITICAL

The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.

Affects 1 product across 1 vendor.

CVSS 2.010.0
EPSS2.1%
Percentile82th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity.
CWE Weakness Definitions
CWE-255: CWE-255
◆ AI Analysis — automated analysis, not human-reviewed

This vulnerability was disclosed in 2008. A critical vulnerability affects Cisco systems (CVE-2008-4296). No public exploit code is currently available. Isolate affected systems if patching is not feasible.

BSID: BS-2008-GLOBAL-327962-C • Model: rule-based-v1 • Confidence: MEDIUM

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2008-4296?
This vulnerability was disclosed in 2008. A critical vulnerability affects Cisco systems (CVE-2008-4296). No public exploit code is currently available. Isolate affected systems if patching is not feasible.
What is the CVSS score for CVE-2008-4296?
CVE-2008-4296 has CVSS 10.0 (Critical). Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C. EPSS: 2.1%.
Is CVE-2008-4296 actively exploited?
No confirmed active exploitation of CVE-2008-4296 as of 2026-09-25.
How do I remediate CVE-2008-4296?
Priority: MEDIUM.
What systems are affected by CVE-2008-4296?
CVE-2008-4296 affects Cisco Linksys Wrt350N.
Vulnerability Details
CVE IDCVE-2008-4296
BSIDBS-2008-GLOBAL-327962-C BreachSpider Global ID
CVSS VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Published2008-09-27
Last Modified2026-06-16
ICS Relevance75%
Weakness (CWE)
CWE-255
Domains
NETWORK-INFRA
SourceNVD
Official Description

The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

Vulnerability details: The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access. CVSS vector: AV:N/AC:L/Au:N/C:C/I:C/A:C.

Exploitation Likelihood: LOW

Affected Products
VendorProductAffected Versions
Cisco Linksys Wrt350N All versions
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 6592 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Modelrule-based-v1
ConfidenceMEDIUM
Enriched At2026-05-24
SHA-512 Audit Hash7c477e320f8e734f092f89fdb9243eb21d40331bf590b45f4b1116a426b02b9e7b2fcee9bea4908bbbb5f9de6f537f21d475258b6849164e5bf3c4155a8aa915
Related CVEs affecting Cisco
CVE-1999-0775 10.0 Cisco Gigabit Switch routers running IOS allow remote attackers to forward un... CVE-2003-1096 10.0 The Cisco LEAP challenge/response authentication mechanism uses passwords in ... CVE-2000-1054 10.0 Buffer overflow in CSAdmin module in CiscoSecure ACS Server 2.4(2) and earlie... CVE-2018-0101 10.0 A vulnerability in the Secure Sockets Layer (SSL) VPN functionality of the Ci... CVE-2012-5417 10.0 Cisco Prime Data Center Network Manager (DCNM) before 6.1(1) does not properl...
View all Cisco CVEs →

Critical Severity - Know Your Exposure

A CVSS 10.0 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →