Linksys WRT1900ACS Firmware vulnerabilities

2 CVEs affecting Linksys WRT1900ACS Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2019-7579, published 2019-06-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-7579, published 2019-06-17. High severity, CVSS 7.5. EPSS: 1.8% chance of exploitation in the next 30 days. An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. An ability exists for an unauthenticated user to browse a confidential ui/1.0.99.187766/dynamic/js/setup.js.localized file on the…
CVE-2019-7311, published 2019-06-06. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. An issue was discovered on Linksys WRT1900ACS 1.0.3.187766 devices. A lack of encryption in how the user login cookie (admin-auth) is stored on a victim's computer results in the admin password being…