İçeriğe atla
Noroxi

Linksys kayıtları

linksys üreticisine ait 223 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
4 · %1,8
Pre-auth RCE
31
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 17
  2. 18
  3. 19
  4. 20
  5. 22
  6. 23
  7. 24
  8. 25
  9. 26

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

223 kayıt
  • CVE-2017-17411
    65Bu hafta

    This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Linksys WVBR0.

    KritikCVSS 9,8SilahlaştırılmışEPSS %87

    linksys · wvbr0 firmware21 Ara 2017

  • CVE-2005-2799
    51Planlayın

    Buffer overflow in apply.cgi in Linksys WRT54G 3.01.03, 3.03.6, and possibly other versions before 4.20.7, allows remote attackers to execut

    YüksekCVSS 7,5SilahlaştırılmışEPSS %70

    linksys · wrt54g15 Eyl 2005

  • CVE-2020-35713
    49Planlayın

    Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metach

    KritikCVSS 9,8Kavram kanıtıEPSS %32

    linksys · re6500 firmware25 Ara 2020

  • CVE-2010-1573
    45Planlayın

    Linksys WAP54Gv3 firmware 3.04.03 and earlier uses a hard-coded username (Gemtek) and password (gemtekswd) for a debug interface for certain

    KritikCVSS 9,8İstismar yokEPSS %20

    linksys · wap54g firmware9 Haz 2010

  • CVE-2019-16340
    45Planlayın

    Belkin Linksys Velop 1.1.8.192419 devices allows remote attackers to discover the recovery key via a direct request for the /sysinfo_json.cg

    KritikCVSS 9,8İstismar yokEPSS %19

    linksys · velop whw0303 firmware21 Kas 2019

  • CVE-2024-27497
    43Planlayın

    Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

    YüksekCVSS 8,8Kavram kanıtıEPSS %26

    linksys · e2000 firmware1 Mar 2024

  • CVE-2025-45488
    43Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex

    KritikCVSS 9,8İstismar yokEPSS %11

    linksys · e5600 firmware6 May 2025

  • CVE-2025-45487
    42Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.

    KritikCVSS 9,8İstismar yokEPSS %11

    linksys · e5600 firmware6 May 2025

  • CVE-2022-38555
    42Planlayın

    Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.

    KritikCVSS 9,8İstismar yokEPSS %9

    linksys · e1200 firmware28 Ağu 2022

  • CVE-2013-4658
    42Planlayın

    Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share.

    KritikCVSS 9,8İstismar yokEPSS %9

    linksys · ea6500 firmware25 Eki 2019

  • CVE-2008-1247
    42Planlayın

    The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote

    KritikCVSS 10,0Kavram kanıtıEPSS %5

    linksys · wrt54g10 Mar 2008

  • CVE-2019-11535
    41Planlayın

    Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote comm

    KritikCVSS 9,8İstismar yokEPSS %5

    linksys · re6400 firmware17 Tem 2019

  • CVE-2009-3341
    41Planlayın

    Buffer overflow on the Linksys WRT54GL wireless router allows remote attackers to execute arbitrary code via unspecified vectors, as demonst

    KritikCVSS 10,0İstismar yokEPSS %4

    linksys · wrt54gl24 Eyl 2009

  • CVE-2010-2261
    41Planlayın

    Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) data

    KritikCVSS 10,0İstismar yokEPSS %2

    linksys · wap54gv39 Haz 2010

  • CVE-2008-1268
    41Planlayın

    The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers

    KritikCVSS 10,0İstismar yokEPSS %2

    linksys · wrt54g10 Mar 2008

  • CVE-2002-2159
    41Planlayın

    Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administ

    KritikCVSS 10,0İstismar yokEPSS %2

    linksys · befsr1131 Ara 2002

  • CVE-2024-25852
    40Planlayın

    Linksys RE7000 v2.0.9, v2.0.11, and v2.0.15 have a command execution vulnerability in the "AccessControlList" parameter of the access contro

    YüksekCVSS 8,8Kavram kanıtıEPSS %16

    linksys · re7000 firmware11 Nis 2024

  • CVE-2024-33789
    40Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

    KritikCVSS 9,8İstismar yokEPSS %2

    linksys · e5600 firmware3 May 2024

  • CVE-2025-45491
    40Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the userna

    KritikCVSS 9,8İstismar yokEPSS %1

    linksys · e5600 firmware6 May 2025

  • CVE-2025-45490
    40Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the passwo

    KritikCVSS 9,8İstismar yokEPSS %1

    linksys · e5600 firmware6 May 2025

  • CVE-2025-45489
    40Planlayın

    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostna

    KritikCVSS 9,8İstismar yokEPSS %1

    linksys · e5600 firmware6 May 2025

  • CVE-2024-57224
    40Planlayın

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps fu

    KritikCVSS 9,8İstismar yokEPSS %1

    linksys · e7350 firmware10 Oca 2025

  • CVE-2024-57225
    40Planlayın

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.

    KritikCVSS 9,8İstismar yokEPSS %1

    linksys · e7350 firmware10 Oca 2025

  • CVE-2024-57223
    40Planlayın

    Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode f

    KritikCVSS 9,8İstismar yokEPSS %1

    linksys · e7350 firmware10 Oca 2025

  • CVE-2008-4594
    40Planlayın

    Unspecified vulnerability in the SNMPv3 component in Linksys WAP4400N firmware 1.2.14 on the Marvell Semiconductor 88W8361P-BEM1 chipset has

    KritikCVSS 10,0İstismar yokEPSS %1

    linksys · wap400n17 Eki 2008