Linksys e2500 Firmware vulnerabilities

5 CVEs affecting Linksys e2500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-44654, published 2025-07-21.

More from Linksys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2018-3953, published 2018-10-17. High severity, CVSS 7.2. EPSS: 13.5% chance of exploitation in the next 30 days. Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to…
• CVE-2018-3955, published 2018-10-17. High severity, CVSS 7.2. EPSS: 4.8% chance of exploitation in the next 30 days. An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04). Specially crafted…
• CVE-2018-3954, published 2018-10-17. High severity, CVSS 7.2. EPSS: 3.4% chance of exploitation in the next 30 days. Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to…
• CVE-2025-44654, published 2025-07-21. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the…
• CVE-2024-40495, published 2024-07-24. High severity, CVSS 8.0. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function.