Linksys WRT54GS vulnerabilities

3 CVEs affecting Linksys WRT54GS, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2011-4499, published 2011-11-22.

More from Linksys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2005-4257, published 2005-12-15. High severity, CVSS 7.8. EPSS: 1.4% chance of exploitation in the next 30 days. Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka…
• CVE-2011-4499, published 2011-11-22. High severity, CVSS 7.5. EPSS: 1.3% chance of exploitation in the next 30 days. The UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware before 4.71.1, and WRT54GS v4 with firmware before…
• CVE-2005-2589, published 2005-08-17. High severity, CVSS 7.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients to bypass authentication by connecting without…