Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Linksys — Vulnerabilities & Security Advisories 99

Browse all 99 CVE security advisories affecting Linksys. AI-powered Chinese analysis, POCs, and references for each vulnerability.

Linksys operates primarily as a manufacturer of consumer networking hardware, including wireless routers and mesh systems, facilitating home and small office internet connectivity. Security audits have identified 93 Common Vulnerabilities and Exposures (CVEs) associated with its product line, predominantly stemming from embedded Linux-based firmware. Historically, the most prevalent vulnerability classes involve Remote Code Execution (RCE) and Cross-Site Scripting (XSS), often exploited through unauthenticated access to web management interfaces. Privilege escalation flaws also frequently appear, allowing attackers to gain administrative control over devices. Notable incidents include critical flaws in older WRT series routers that permitted full system compromise without user interaction. These issues largely result from insufficient input validation and hardcoded credentials in legacy firmware versions. While newer models have improved security postures, the historical pattern highlights significant risks in maintaining long-term support for consumer-grade networking equipment with complex embedded software stacks.

CVE ID Title CVSS Severity Published
CVE-2025-8822 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode algDisable stack-based overflow — RE6250 CWE-121 8.8 High 2025-08-11
CVE-2025-8821 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 RP_setBasic os command injection — RE6250 CWE-78 6.3 Medium 2025-08-11
CVE-2025-8820 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 wirelessBasic stack-based overflow — RE6250 CWE-121 8.8 High 2025-08-10
CVE-2025-8819 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setWan stack-based overflow — RE6250 CWE-121 8.8 High 2025-08-10
CVE-2025-8818 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan setDFSSetting os command injection — RE6250 CWE-78 6.3 Medium 2025-08-10
CVE-2025-8817 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setLan stack-based overflow — RE6250 CWE-121 8.8 High 2025-08-10
CVE-2025-8816 Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 setOpMode stack-based overflow — RE6250 CWE-121 8.8 High 2025-08-10
CVE-2013-10058 Linksys Routers apply.cgi Remote Command Injection — WRT160nv2 CWE-78 8.8 - 2025-08-01
CVE-2013-10062 Linksys Routers apply.cgi Path Traversal — E1500 CWE-22 6.5 - 2025-08-01
CVE-2014-125122 Linksys WRT120N tmUnblock.cgi Stack-Based Buffer Overflow Admin Password Reset — WRT120N CWE-121 9.8AI Critical AI 2025-07-31
CVE-2013-3307 Linksys多款产品 操作系统命令注入漏洞 — E1000 CWE-78 8.3 High 2025-07-11
CVE-2025-6752 Linksys WRT1900ACS/EA7200/EA7450/EA7500 IGD Layer3Forwarding SetDefaultConnectionService stack-based overflow — WRT1900ACS CWE-121 8.8 High 2025-06-27
CVE-2025-6751 Linksys E8450 HTTP POST Request portal.cgi set_device_language buffer overflow — E8450 CWE-120 8.8 High 2025-06-27
CVE-2025-34037 Linksys Routers E/WAG/WAP/WES/WET/WRT-Series — E4200 CWE-78 9.8AI Critical AI 2025-06-24
CVE-2025-5447 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 ssid1MACFilter os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5446 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkCredentialsByBBS os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5445 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_checkFWByBBS os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5444 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_UpgradeFWByBBS os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5443 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 wirelessAdvancedHidden os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5442 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 RP_pingGatewayByBBS os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5441 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 setDeviceURL os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5440 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 NTP os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5439 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 verifyFacebookLike os command injection — RE6500 CWE-78 6.3 Medium 2025-06-02
CVE-2025-5438 Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 WPS command injection — RE6500 CWE-77 6.3 Medium 2025-06-02
CVE-2025-5000 Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control_panel_sw command injection — FGW3000-AH CWE-77 6.3 Medium 2025-05-20
CVE-2025-4999 Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub_4153FC command injection — FGW3000-AH CWE-77 6.3 Medium 2025-05-20
CVE-2024-8408 Linksys WRT54G POST Parameter apply.cgi validate_services_port stack-based overflow — WRT54G CWE-121 6.3 Medium 2024-09-04
CVE-2024-1406 Linksys WRT54GL Web Management Interface SysInfo1.htm information disclosure — WRT54GL CWE-200 4.3 Medium 2024-02-10
CVE-2024-1405 Linksys WRT54GL Web Management Interface wlaninfo.htm information disclosure — WRT54GL CWE-200 4.3 Medium 2024-02-10
CVE-2024-1404 Linksys WRT54GL Web Management Interface SysInfo.htm information disclosure — WRT54GL CWE-200 4.3 Medium 2024-02-09

This page lists every published CVE security advisory associated with Linksys. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.