High severity8.8NVD Advisory· Published Aug 6, 2017· Updated Jun 17, 2026

CVE-2017-10677

Description

Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.

Affected products

Linksys/Ea4500 Firmware
cpe:2.3:o:linksys:ea4500_firmware:*:*:*:*:*:*:*:*
Range: <=2.0.36
Linksys/Ea4500llm-fuzzy
Range: <2.1.41.164606

Patches

Vulnerability mechanics

References

iscouncil.blogspot.com/2017/08/cross-site-request-forgery.htmlnvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000