How severe is CVE-2005-2586?

CVE-2005-2586 has a CVSS 2.0 base score of 2.1, rated low severity.

Is CVE-2005-2586 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2005-2586?

CVE-2005-2586 affects Mentor Adslfr4ii. See the affected-products list for the exact vulnerable versions.

How do I fix CVE-2005-2586?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2005-2586 published?

CVE-2005-2586 was published on 2005-08-16 and last updated on 2026-06-16.

CVE-2005-2586

CVE-2005-2586 is a low-severity vulnerability in Mentor Adslfr4ii with a CVSS 2.0 base score of 2.1. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Low (CVSS 2.0 base score 2.1)
EPSS exploit prediction: 0% (25th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Mentor Adslfr4ii
Published: 2005-08-16
Last modified: 2026-06-16

Description

Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information.

Frequently asked questions

What is CVE-2005-2586?: Mentor ADSL-FR4II router running firmware 2.00.0111 stores the web administration password in cleartext in the backup configuration file, which allows local users to obtain sensitive information.
How severe is CVE-2005-2586?: CVE-2005-2586 has a CVSS 2.0 base score of 2.1, rated low severity.
Is CVE-2005-2586 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (25th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2005-2586?: CVE-2005-2586 affects Mentor Adslfr4ii. See the affected-products list for the exact vulnerable versions.
How do I fix CVE-2005-2586?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2005-2586 published?: CVE-2005-2586 was published on 2005-08-16 and last updated on 2026-06-16.

References

Affected products (1)

cpe:2.3:h:mentor:adslfr4ii:2.00.0111:*:*:*:*:*:*:*

More vulnerabilities in Mentor Adslfr4ii

CVE-2005-2583 — High (CVSS 7.5): Mentor ADSL-FR4II router running firmware 2.00.0111 has an undocumented web server running on TCP port 5678, which…
CVE-2005-2585 — Medium (CVSS 5.0): Mentor ADSL-FR4II router running firmware 2.00.0111 allows remote attackers to cause a denial of service (active TCP…

All CVEs affecting Mentor Adslfr4ii →