Linksys BEFW11S4 vulnerabilities

3 CVEs affecting Linksys BEFW11S4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2005-4257, published 2005-12-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2002-1865, published 2002-12-31. Medium severity, CVSS 5.0. EPSS: 2.9% chance of exploitation in the next 30 days. Buffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4 Wireless AP + Cable/DSL Router 1.37.2 through…
CVE-2002-1312, published 2002-11-20. Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days. Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware before 1.43.3 with…
CVE-2005-4257, published 2005-12-15. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka…