Records254All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical43CVSS 9.0–10.0
CVSS high119CVSS 7.0–8.9
Exploited now
Linksys records in CISA KEVNo Linksys vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority HIGH 82
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01727 · Published 2025-01-10 · No fix listed CWE-77
Priority HIGH 82
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pin_wps function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01727 · Published 2025-01-10 · No fix listed CWE-77
Priority HIGH 82
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_wps_gen_pincode function.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01727 · Published 2025-01-10 · No fix listed CWE-77
Priority HIGH 70
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01232 · Published 2025-01-10 · No fix listed CWE-77
Priority HIGH 70
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01232 · Published 2025-01-10 · No fix listed CWE-77
Priority HIGH 70
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function.
CVSS 3.1HIGH 8.0· Adjacent network · Low privileges · No interaction · EPSS 0.01232 · Published 2025-01-10 · No fix listed CWE-77
Priority MEDIUM 62
A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032).
CVSS 3.1MEDIUM 5.9· Local · No auth · No interaction · EPSS 0.00221 · Published 2025-11-13 · No fix listed CWE-121
Priority MEDIUM 61
Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_cancel_wps function.
CVSS 3.1MEDIUM 6.3· Network · No auth · User interaction · EPSS 0.00844 · Published 2025-01-10 · No fix listed CWE-77
THREATIST.IORead the docs