CVE-2002-2159: Linksys BEFSR11

High severity, CVSS 10.0. EPSS: 2.4% chance of exploitation in the next 30 days.

Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.

Affected products

• Linksys BEFSR11: version 1.42.7 only
• Linksys BEFSR41: version 1.42.7 only
• Linksys BEFSRU31: version 1.42.7 only

Published 2002-12-31. Last modified 2026-06-16.