E8450
by Linksys
CVEs (12)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2026-120283 | Cri | 0.65 | 10.0 | — | Nov 2, 2026 | A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was… | ||
| CVE-2025-6751 | Hig | 0.57 | 8.8 | 0.01 | Jun 27, 2025 | A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the function set_device_language of the file portal.cgi of the component HTTP POST Request Handler. The manipulation of the argument dut_language leads to buffer… | ||
| CVE-2024-57542 | Hig | 0.57 | 8.8 | 0.02 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn. | ||
| CVE-2024-57539 | Hig | 0.53 | 8.2 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail. | ||
| CVE-2024-57536 | Hig | 0.52 | 8.0 | 0.02 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status. | ||
| CVE-2024-57540 | Med | 0.42 | 6.5 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification. | ||
| CVE-2024-57538 | Med | 0.42 | 6.5 | 0.01 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification. | ||
| CVE-2024-57537 | Med | 0.41 | 6.3 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification. | ||
| CVE-2024-57545 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification. | ||
| CVE-2024-57544 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification. | ||
| CVE-2024-57543 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification. | ||
| CVE-2024-57541 | Med | 0.36 | 5.5 | 0.00 | Jan 21, 2025 | Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification. |
- risk 0.65cvss 10.0epss —
A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such manipulation of the argument hidden_timezone leads to stack-based buffer overflow. The attack can be executed remotely. The vendor was…
- risk 0.57cvss 8.8epss 0.01
A vulnerability, which was classified as critical, was found in Linksys E8450 up to 1.2.00.360516. This affects the function set_device_language of the file portal.cgi of the component HTTP POST Request Handler. The manipulation of the argument dut_language leads to buffer…
- risk 0.57cvss 8.8epss 0.02
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via the field id_email_check_btn.
- risk 0.53cvss 8.2epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail.
- risk 0.52cvss 8.0epss 0.02
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via wizard_status.
- risk 0.42cvss 6.5epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (action) is copied to the stack without length verification.
- risk 0.42cvss 6.5epss 0.01
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (anonymous_protect_status) is copied to the stack without length verification.
- risk 0.41cvss 6.3epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (page) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (hidden_dhcp_num) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (lan_ipaddr) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (dhcpstart_ip) is copied to the stack without length verification.
- risk 0.36cvss 5.5epss 0.00
Linksys E8450 v1.2.00.360516 was discovered to contain a buffer overflow vulnerability. The parsed field (ipv6_protect_status) is copied to the stack without length verification.