Vulnerabilidades em Linksys

112 resultados
Análise Vexday

O portfólio de vulnerabilidades da Linksys reúne 93 CVEs catalogadas, com taxa de exploração ativa abaixo da média geral do catálogo — nenhuma entrada no CISA KEV até o momento. No entanto, o cenário exige atenção: a CVE-2017-17411, associada a um EPSS de 0,8793, indica altíssima probabilidade de exploração ativa segundo modelos preditivos, e está entre as quatro CVEs com prova de conceito pública disponível. A falha mais recorrente é CWE-121 (stack-based buffer overflow), que historicamente favorece execução remota de código em dispositivos de rede como roteadores. Equipes responsáveis por ativos Linksys devem priorizar a revisão de CVEs críticas e com PoC pública, especialmente as mais antigas que podem não ter recebido correção ou ter sido esquecidas no ciclo de patch.

CVE-2025-9252HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DisablePasswordAlertRedirect stack-based overflowEPSS 1.0%CVE-2025-9249HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 DHCPReserveAddGroup stack-based overflowEPSS 1.0%CVE-2025-9246HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 check_port_conflict stack-based overflowEPSS 1.0%CVE-2025-9248HIGHLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_pingGatewayByBBS stack-based overflowEPSS 1.0%CVE-2026-121933CRITICALLinksys E5350 Setup Wizard apply.cgi save_settings missing authenticationEPSS 1.0%CVE-2025-14135HIGHLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wired_clientlist_setClientsName stack-based overflowEPSS 0.9%CVE-2025-14134HIGHLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so stack-based overflowEPSS 0.9%CVE-2025-14133HIGHLinksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 mod_form.so AP_get_wireless_clientlist_setClientsName stack-based overflowEPSS 0.9%CVE-2024-1404MEDIUMLinksys WRT54GL Web Management Interface SysInfo.htm information disclosureEPSS 0.8%CVE-2026-121615CRITICALLinksys E5600 Login mesh_login.cgi improper authenticationEPSS 0.8%CVE-2026-121618MEDIUMLinksys E5600 Factory Quality Control fqc.cgi information disclosureEPSS 0.8%CVE-2024-8408MEDIUMLinksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflowEPSS 0.8%CVE-2025-6751HIGHLinksys E8450 HTTP POST Request portal.cgi set_device_language buffer overflowEPSS 0.7%CVE-2026-108892CRITICALLinksys E1700 Mac Filter ssid1MACFilter stack-based overflowEPSS 0.6%CVE-2025-9362MEDIUMLinksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 urlFilterManageRule stack-based overflowEPSS 0.6%CVE-2026-120283CRITICALLinksys E8450 portal.cgi strcpy stack-based overflowEPSS 0.6%CVE-2022-38132HIGHCommand injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands.EPSS 0.6%CVE-2025-9146HIGHLinksys E5600 Firmware checkFw.sh verify_gemtek_header risky encryptionEPSS 0.6%CVE-2026-108893CRITICALLinksys E1700 setVlan stack-based overflowEPSS 0.5%CVE-2026-114576MEDIUMLinksys RE6250 Web Management strcmp random valuesEPSS 0.5%