CVE-2022-24372: Linksys MR9600 Firmware

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share.

Affected products

• Linksys MR9600 Firmware: before 2.0.5 (fixed in 2.0.5)

Published 2022-04-27. Last modified 2026-06-17.