Cisco Linksys WRT350N vulnerabilities

2 CVEs affecting Cisco Linksys WRT350N, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3068, published 2014-09-29.

More from Cisco.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2008-4296, published 2008-09-27. High severity, CVSS 10.0. EPSS: 2.1% chance of exploitation in the next 30 days. The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" as its default password for the "admin" account, which makes it easier for remote attackers to obtain access.
• CVE-2013-3068, published 2014-09-29. Medium severity, CVSS 6.8. EPSS: 0.6% chance of exploitation in the next 30 days. Cross-site request forgery (CSRF) vulnerability in apply.cgi in Linksys WRT310Nv2 2.0.0.1 allows remote attackers to hijack the authentication of administrators for requests that change passwords and…