Linksys EA4500 Firmware vulnerabilities

3 CVEs affecting Linksys EA4500 Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2017-10677, published 2017-08-06.

More from Linksys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-8244, published 2014-11-01. High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days. Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300,…
• CVE-2014-8243, published 2014-11-01. Low severity, CVSS 3.3. EPSS: 1.2% chance of exploitation in the next 30 days. Linksys SMART WiFi firmware on EA2700 and EA3500 devices; before 2.1.41 build 162351 on E4200v2 and EA4500 devices; before 1.1.41 build 162599 on EA6200 devices; before 1.1.40 build 160989 on EA6300,…
• CVE-2017-10677, published 2017-08-06. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. Cross-Site Request Forgery (CSRF) exists on Linksys EA4500 devices with Firmware Version before 2.1.41.164606, as demonstrated by a request to apply.cgi to disable SIP.