Linksys e1700 Firmware vulnerabilities

6 CVEs affecting Linksys e1700 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-9528, published 2025-08-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2025-9528, published 2025-08-27. High severity, CVSS 7.2. EPSS: 54.5% chance of exploitation in the next 30 days. A vulnerability was determined in Linksys E1700 1.0.0.4.003. This vulnerability affects the function systemCommand of the file /goform/systemCommand. Executing manipulation of the argument command…
CVE-2024-22544, published 2024-02-27. High severity, CVSS 8.0. EPSS: 9.3% chance of exploitation in the next 30 days. An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbitrary code via the setDateTime function.
CVE-2025-9527, published 2025-08-27. High severity, CVSS 8.8. EPSS: 1.5% chance of exploitation in the next 30 days. A vulnerability was found in Linksys E1700 1.0.0.4.003. This affects the function QoSSetup of the file /goform/QoSSetup. Performing manipulation of the argument ack_policy results in stack-based…
CVE-2025-9526, published 2025-08-27. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A vulnerability has been found in Linksys E1700 1.0.0.4.003. Affected by this issue is the function setSysAdm of the file /goform/setSysAdm. Such manipulation of the argument rm_port leads to…
CVE-2025-9525, published 2025-08-27. High severity, CVSS 8.8. EPSS: 1.4% chance of exploitation in the next 30 days. A flaw has been found in Linksys E1700 1.0.0.4.003. Affected by this vulnerability is the function setWan of the file /goform/setWan. This manipulation of the argument DeviceName/lanIp causes…
CVE-2024-22543, published 2024-02-27. Medium severity, CVSS 6.1. EPSS: 1.2% chance of exploitation in the next 30 days. An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/* URI or via the ExportSettings…