E8450 Firmware
by Linksys
CVEs (11)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-38841 | Hig | 0.61 | 8.8 | 0.11 | Apr 16, 2023 | Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page. | ||
| CVE-2024-57542 | Hig | 0.57 | 8.8 | 0.02 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn. | ||
| CVE-2024-57539 | Hig | 0.53 | 8.2 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail. | ||
| CVE-2024-57536 | Hig | 0.52 | 8.0 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status. | ||
| CVE-2024-57540 | Med | 0.42 | 6.5 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification. | ||
| CVE-2024-57538 | Med | 0.42 | 6.5 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification. | ||
| CVE-2024-57537 | Med | 0.41 | 6.3 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification. | ||
| CVE-2024-57545 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification. | ||
| CVE-2024-57544 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification. | ||
| CVE-2024-57543 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification. | ||
| CVE-2024-57541 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification. |
- risk 0.61cvss 8.8epss 0.11
Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page.
- risk 0.57cvss 8.8epss 0.02
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn.
- risk 0.53cvss 8.2epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail.
- risk 0.52cvss 8.0epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status.
- risk 0.42cvss 6.5epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification.
- risk 0.42cvss 6.5epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification.
- risk 0.41cvss 6.3epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification.