Linksys WRT54G Firmware vulnerabilities

2 CVEs affecting Linksys WRT54G Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-8408, published 2024-09-04.

More from Linksys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2024-8408, published 2024-09-04. Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Linksys WRT54G 4.21.5. It has been rated as critical. Affected by this issue is the function validate_services_port of the file /apply.cgi of the component POST Parameter…
• CVE-2024-41281, published 2024-07-19. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. Linksys WRT54G v4.21.5 has a stack overflow vulnerability in get_merge_mac function.