linksys Vulnerability Advisory Catalog

Total 215 security vulnerabilities recorded for linksys software and firmware.

← Back to All Vendors
Component: e8450_firmware

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without lengt...

📅 2025-01-21
CVSS 6.5 Dossier →
Component: e8450_firmware

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail....

📅 2025-01-21
CVSS 8.2 Dossier →
Component: e8450_firmware

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the s...

📅 2025-01-21
CVSS 6.5 Dossier →
Component: e8450_firmware

Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length ...

📅 2025-01-21
CVSS 6.3 Dossier →
Component: e8450_firmware

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status....

📅 2025-01-21
CVSS 8.0 Dossier →
Component: e5600_firmware

A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute...

📅 2025-01-15
CVSS 4.8 Dossier →
Component: e5600_firmware

A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute...

📅 2025-01-15
CVSS 4.8 Dossier →
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function....

📅 2025-01-10
CVSS 8.0 Dossier →
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function....

📅 2025-01-10
CVSS 8.0 Dossier →
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function....

📅 2025-01-10
CVSS 8.0 Dossier →
CVE-2024-57225 CRITICAL
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function....

📅 2025-01-10
CVSS 9.8 Dossier →
CVE-2024-57224 CRITICAL
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function....

📅 2025-01-10
CVSS 9.8 Dossier →
CVE-2024-57223 CRITICAL
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function....

📅 2025-01-10
CVSS 9.8 Dossier →
Component: e7350_firmware

Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function....

📅 2025-01-10
CVSS 6.3 Dossier →
Component: e3000_firmware

Linksys E3000 1.0.06.002_US is vulnerable to command injection via the diag_ping_start function....

📅 2024-11-21
CVSS 8.0 Dossier →
CVE-2024-8408 MEDIUM
Component: wrt54g_firmware

A vulnerability was found in Linksys WRT54G 4.21.5. It has been rated as critical. Affected by this issue is the function validate_services_port of th...

📅 2024-09-04
CVSS 6.3 Dossier →
Component: e1500_firmware

A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticat...

📅 2024-08-19
CVSS 8.8 Dossier →
Component: e2500_firmware

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_pare...

📅 2024-07-24
CVSS 8.0 Dossier →
Component: wrt54g_firmware

Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function....

📅 2024-07-19
CVSS 8.8 Dossier →
Component: mx6200_firmware

Linksys Velop Pro 6E 1.0.8 MX6200_1.0.8.215731 and 7 1.0.10.215314 devices send cleartext Wi-Fi passwords over the public Internet during app-based in...

📅 2024-07-09
CVSS 5.3 Dossier →
Component: velop_whw0101_firmware

Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root....

📅 2024-06-11
CVSS 6.8 Dossier →
Component: e5600_firmware

An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service....

📅 2024-05-28
CVSS 7.5 Dossier →
CVE-2023-46012 CRITICAL
Component: ea7500_firmware

Buffer Overflow vulnerability LINKSYS EA7500 3.0.1.207964 allows a remote attacker to execute arbitrary code via an HTTP request to the IGD UPnP....

📅 2024-05-07
CVSS 9.8 Dossier →
Component: e5600_firmware

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint....

📅 2024-05-06
CVSS 8.0 Dossier →
Page 5 of 9 (215 Total Records)