CVE-2004-0580: Linksys BEFCMU10

Medium severity, CVSS 5.0. EPSS: 8% chance of exploitation in the next 30 days.

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

Affected products

• Linksys BEFCMU10: any version
• Linksys BEFN2PS4: any version; version 1.42.7 only
• Linksys BEFSR11: version 1.40.2 only; version 1.41 only; version 1.42.3 only; version 1.42.7 only; version 1.43 only; version 1.43.3 only; …
• Linksys BEFSR41: version 1.35 only; version 1.36 only; version 1.37 only; version 1.38.5 only; version 1.39 only; version 1.40.2 only; …
• Linksys BEFSR41W: any version
• Linksys BEFSR81: any version; version 2.42.7.1 only; version 2.44 only
• Linksys BEFSRU31: version 1.40.2 only; version 1.41 only; version 1.42.3 only; version 1.42.7 only; version 1.43 only; version 1.43.3 only; …
• Linksys BEFSX41: version 1.42.7 only; version 1.43 only; version 1.43.3 only; version 1.43.4 only; version 1.44 only; version 1.44.3 only; …
• Linksys BEFVP41: any version; version 1.39.64 only; version 1.40.3f only; version 1.40.4 only; version 1.42.7 only
• Linksys RV082: any version
• Linksys WAP55AG: version 1.0.7 only
• Linksys WRT54G: version 1.42.3 only; version 2.00.8 only

Published 2004-08-06. Last modified 2026-06-16.