linksys Vulnerability Advisory Catalog

Total 215 security vulnerabilities recorded for linksys software and firmware.

← Back to All Vendors
CVE-2008-4441 UNKNOWN
Component: wap400n

The Marvell driver for the Linksys WAP4400N Wi-Fi access point with firmware 1.2.14 on the Marvell 88W8361P-BEM1 chipset, when WEP mode is enabled, do...

📅 2008-10-14
CVSS 7.1 Dossier →
CVE-2008-2092 UNKNOWN
Component: spa-2102_phone_adapter

Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death"). NOTE: the ...

📅 2008-05-06
CVSS 7.8 Dossier →
CVE-2007-6709 UNKNOWN
Component: wag54gs

The Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware has "admin" as its default password for the "admin" account, which...

📅 2008-03-13
CVSS 7.5 Dossier →
CVE-2007-6708 UNKNOWN
Component: wag54gs

Multiple cross-site request forgery (CSRF) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allo...

📅 2008-03-13
CVSS 4.3 Dossier →
CVE-2007-6707 UNKNOWN
Component: wag54gs

Multiple cross-site scripting (XSS) vulnerabilities on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.01.03 and earlier firmware allow remot...

📅 2008-03-13
CVSS 4.3 Dossier →
CVE-2008-1268 UNKNOWN
Component: wrt54g

The FTP server on the Linksys WRT54G 7 router with 7.00.1 firmware does not verify authentication credentials, which allows remote attackers to establ...

📅 2008-03-10
CVSS 10.0 Dossier →
CVE-2008-1265 UNKNOWN
Component: wrt54g

The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface....

📅 2008-03-10
CVSS 7.8 Dossier →
CVE-2008-1264 UNKNOWN
Component: wrt54g

The Linksys WRT54G router has "admin" as its default FTP password, which allows remote attackers to access sensitive files including nvram.cfg, a file...

📅 2008-03-10
CVSS 7.5 Dossier →
CVE-2008-1263 UNKNOWN
Component: wrt54g

The Linksys WRT54G router stores passwords and keys in cleartext in the Config.bin file, which might allow remote authenticated users to obtain sensit...

📅 2008-03-10
CVSS 4.0 Dossier →
CVE-2008-1247 UNKNOWN
Component: wrt54g

The web interface on the Linksys WRT54g router with firmware 1.00.9 does not require credentials when invoking scripts, which allows remote attackers ...

📅 2008-03-10
CVSS 10.0 Dossier →
CVE-2008-1243 UNKNOWN
Component: wrt300n

Cross-site scripting (XSS) vulnerability on the Linksys WRT300N router with firmware 2.00.20, when Mozilla Firefox or Apple Safari is used, allows rem...

📅 2008-03-10
CVSS 4.3 Dossier →
CVE-2008-0228 UNKNOWN
Component: wrt54gl

Cross-site request forgery (CSRF) vulnerability in apply.cgi in the Linksys WRT54GL Wireless-G Broadband Router with firmware 4.30.9 allows remote att...

📅 2008-01-10
CVSS 9.3 Dossier →
CVE-2007-5411 UNKNOWN
Component: spa941

Cross-site scripting (XSS) vulnerability in the Linksys SPA941 VoIP Phone with firmware 5.1.8 allows remote attackers to inject arbitrary web script o...

📅 2007-10-12
CVSS 4.3 Dossier →
CVE-2007-3574 UNKNOWN
Component: wag54gs

Multiple cross-site scripting (XSS) vulnerabilities in setup.cgi on the Cisco Linksys WAG54GS Wireless-G ADSL Gateway with 1.00.06 firmware allow remo...

📅 2007-07-05
CVSS 4.3 Dossier →
CVE-2007-2270 UNKNOWN
Component: spa941

The Linksys SPA941 VoIP Phone allows remote attackers to cause a denial of service (device reboot) via a 0377 (0xff) character in the From header, and...

📅 2007-04-25
CVSS 7.8 Dossier →
CVE-2007-1585 UNKNOWN
Component: wag200g

The Linksys WAG200G with firmware 1.01.01, WRT54GC 2 with firmware 1.00.7, and WRT54GC 1 with firmware 1.03.0 and earlier allow remote attackers to ob...

📅 2007-03-21
CVSS 5.0 Dossier →
CVE-2006-7121 UNKNOWN
Component: spa921

The HTTP server in Linksys SPA-921 VoIP Desktop Phone allows remote attackers to cause a denial of service (reboot) via (1) a long URL, or a long (2) ...

📅 2007-03-06
CVSS 7.8 Dossier →
CVE-2006-6411 UNKNOWN
Component: wip_330_wireless-g_ip_phone

PhoneCtrl.exe in Linksys WIP 330 Wireless-G IP Phone 1.00.06A allows remote attackers to cause a denial of service (crash) via a TCP SYN scan, as demo...

📅 2006-12-10
CVSS 7.8 Dossier →
CVE-2006-5882 UNKNOWN
Component: wpc300n_wireless-n_notebook_adapter_driver

Stack-based buffer overflow in the Broadcom BCMWL5.SYS wireless device driver 3.50.21.10, as used in Cisco Linksys WPC300N Wireless-N Notebook Adapter...

📅 2006-11-14
CVSS 8.3 Dossier →
CVE-2006-5202 UNKNOWN
Component: wrt54g

Linksys WRT54g firmware 1.00.9 does not require credentials when making configuration changes, which allows remote attackers to modify arbitrary confi...

📅 2006-10-10
CVSS 5.0 Dossier →
CVE-2006-2559 UNKNOWN
Component: wrt54g

Linksys WRT54G Wireless-G Broadband Router allows remote attackers to bypass access restrictions and conduct unauthorized operations via a UPnP reques...

📅 2006-05-24
CVSS 7.5 Dossier →
CVE-2006-1973 UNKNOWN
Component: rt31p2

Multiple unspecified vulnerabilities in Linksys RT31P2 VoIP router allow remote attackers to cause a denial of service via malformed Session Initiatio...

📅 2006-04-21
CVSS 5.0 Dossier →
CVE-2006-1067 UNKNOWN
Component: wrt54g_v5

Linksys WRT54G routers version 5 (running VXWorks) allow remote attackers to cause a denial of service by sending a malformed DCC SEND string to an IR...

📅 2006-03-07
CVSS 5.0 Dossier →
CVE-2006-0309 UNKNOWN
Component: befvp41

Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a ...

📅 2006-01-19
CVSS 4.0 Dossier →
Page 8 of 9 (215 Total Records)