Skip to content
Noroxi

Linksys records

223 published records for vendor linksys.

Researcher profile

Entered KEV
0 · 0%
Weaponized
4 · 1.8%
Pre-auth RCE
31
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

223 records
  • CVE-2017-17411
    65This week

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.

    CriticalCVSS 9.8WeaponizedEPSS 87%

    linksys · wvbr0 firmwareDec 21, 2017

  • CVE-2005-2799
    51Plan

    Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execut

    HighCVSS 7.5WeaponizedEPSS 70%

    linksys · wrt54gSep 15, 2005

  • CVE-2020-35713
    49Plan

    Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metach

    CriticalCVSS 9.8Proof of conceptEPSS 32%

    linksys · re6500 firmwareDec 25, 2020

  • CVE-2010-1573
    45Plan

    Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain

    CriticalCVSS 9.8No exploitEPSS 20%

    linksys · wap54g firmwareJun 9, 2010

  • CVE-2019-16340
    45Plan

    Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cg

    CriticalCVSS 9.8No exploitEPSS 19%

    linksys · velop whw0303 firmwareNov 21, 2019

  • CVE-2024-27497
    43Plan

    Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

    HighCVSS 8.8Proof of conceptEPSS 26%

    linksys · e2000 firmwareMar 1, 2024

  • CVE-2025-45488
    43Plan

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex

    CriticalCVSS 9.8No exploitEPSS 11%

    linksys · e5600 firmwareMay 6, 2025

  • CVE-2025-45487
    42Plan

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.

    CriticalCVSS 9.8No exploitEPSS 11%

    linksys · e5600 firmwareMay 6, 2025

  • CVE-2022-38555
    42Plan

    Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.

    CriticalCVSS 9.8No exploitEPSS 10%

    linksys · e1200 firmwareAug 28, 2022

  • CVE-2013-4658
    42Plan

    Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

    CriticalCVSS 9.8No exploitEPSS 9%

    linksys · ea6500 firmwareOct 25, 2019

  • CVE-2008-1247
    42Plan

    The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote

    CriticalCVSS 10.0Proof of conceptEPSS 5%

    linksys · wrt54gMar 10, 2008

  • CVE-2019-11535
    41Plan

    Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote comm

    CriticalCVSS 9.8No exploitEPSS 5%

    linksys · re6400 firmwareJul 17, 2019

  • CVE-2009-3341
    41Plan

    Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonst

    CriticalCVSS 10.0No exploitEPSS 4%

    linksys · wrt54glSep 24, 2009

  • CVE-2010-2261
    41Plan

    Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) data

    CriticalCVSS 10.0No exploitEPSS 2%

    linksys · wap54gv3Jun 9, 2010

  • CVE-2008-1268
    41Plan

    The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers

    CriticalCVSS 10.0No exploitEPSS 2%

    linksys · wrt54gMar 10, 2008

  • CVE-2002-2159
    41Plan

    Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administ

    CriticalCVSS 10.0No exploitEPSS 2%

    linksys · befsr11Dec 31, 2002

  • CVE-2024-25852
    40Plan

    Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access contro

    HighCVSS 8.8Proof of conceptEPSS 16%

    linksys · re7000 firmwareApr 11, 2024

  • CVE-2018-3953
    40Plan

    Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscept

    HighCVSS 7.2WeaponizedEPSS 13%

    linksys · e1200 firmwareOct 16, 2018

  • CVE-2023-31742
    40Plan

    There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006.

    HighCVSS 7.2WeaponizedEPSS 9%

    linksys · wrt54gl firmwareMay 22, 2023

  • CVE-2024-33789
    40Plan

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

    CriticalCVSS 9.8No exploitEPSS 2%

    linksys · e5600 firmwareMay 3, 2024

  • CVE-2025-45491
    40Plan

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the userna

    CriticalCVSS 9.8No exploitEPSS 1%

    linksys · e5600 firmwareMay 6, 2025

  • CVE-2025-45489
    40Plan

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostna

    CriticalCVSS 9.8No exploitEPSS 1%

    linksys · e5600 firmwareMay 6, 2025

  • CVE-2025-45490
    40Plan

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the passwo

    CriticalCVSS 9.8No exploitEPSS 1%

    linksys · e5600 firmwareMay 6, 2025

  • CVE-2024-57223
    40Plan

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode f

    CriticalCVSS 9.8No exploitEPSS 1%

    linksys · e7350 firmwareJan 10, 2025

  • CVE-2024-57224
    40Plan

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps fu

    CriticalCVSS 9.8No exploitEPSS 1%

    linksys · e7350 firmwareJan 10, 2025