Linksys e2000 Firmware vulnerabilities

3 CVEs affecting Linksys e2000 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-27497, published 2024-03-01.

More from Linksys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-27497, published 2024-03-01. High severity, CVSS 8.8. EPSS: 26.7% chance of exploitation in the next 30 days. Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.
• CVE-2023-31741, published 2023-05-23. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request…
• CVE-2023-31740, published 2023-05-23. High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days. There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request…