Linksys WRT54GL Firmware vulnerabilities
7 CVEs affecting Linksys WRT54GL Firmware, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-1406, published 2024-02-10.
More from Linksys.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2022-43970, published 2023-01-09. High severity, CVSS 7.2. EPSS: 19.3% chance of exploitation in the next 30 days. A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A stack-based buffer overflow in the Start_EPI function within the httpd binary…
- CVE-2023-31742, published 2023-05-22. High severity, CVSS 7.2. EPSS: 9.1% chance of exploitation in the next 30 days. There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post…
- CVE-2022-43973, published 2023-01-09. High severity, CVSS 7.2. EPSS: 1.9% chance of exploitation in the next 30 days. An arbitrary code execution vulnerability exisits in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. The Check_TSSI function within the httpd binary uses unvalidated user…
- CVE-2022-43972, published 2023-01-09. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. A null pointer dereference vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware <= 4.30.18.006. A null pointer dereference in the soap_action function within the upnp…
- CVE-2024-1404, published 2024-02-09. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in Linksys WRT54GL 4.30.18 and classified as problematic. Affected by this issue is some unknown functionality of the file /SysInfo.htm of the component Web Management…
- CVE-2024-1406, published 2024-02-10. Medium severity, CVSS 4.3. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability was found in Linksys WRT54GL 4.30.18. It has been declared as problematic. This vulnerability affects unknown code of the file /SysInfo1.htm of the component Web Management Interface.…
- CVE-2024-1405, published 2024-02-10. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in Linksys WRT54GL 4.30.18. It has been classified as problematic. This affects an unknown part of the file /wlaninfo.htm of the component Web Management Interface. The…