Skip to content
OpenAdvisories
Medium WID-SEC-2025-0158 10 CVEs

Linksys Router: Mehrere Schwachstellen

Published Jan 21, 2025 · Updated Jan 21, 2025 · de-DE

Summary

Ein Angreifer kann mehrere Schwachstellen in Linksys Router ausnutzen, um beliebigen Programmcode auszuführen oder einen Denial-of-Service-Zustand zu erzeugen.

Product

Router der Firma Linksys enthalten eine Firewall und in der Regel eine WLAN-Schnittstelle. Die Geräte sind hauptsächlich für private Anwender und Kleinunternehmen konzipiert.

Vulnerabilities 10

  • High 8.8

    Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_b…

  • High 8.2

    Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail.

  • High 8.0

    Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status.

  • Medium 6.5

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_pro…

  • Medium 6.5

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is co…

  • Medium 6.3

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copi…

  • Medium 5.5

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_…

  • Medium 5.5

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip)…

  • Medium 5.5

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) i…

  • Medium 5.5

    Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_n…

Revision history

  1. #1

    Initiale Fassung

References