CVE-2022-38555

CriticalCVSS 9.8

Published: 28/08/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

9.34%

95th percentile - higher than 95% of all known CVEs

Summary

A buffer overflow vulnerability exists in the Linksys E1200 router firmware version 1.0.04 in the ej_get_web_page_name function. An attacker can exploit this flaw to execute arbitrary code or cause a denial of service.

Risk Assessment

The risk involves potential remote code execution by an unauthenticated attacker, leading to full compromise of the router, network traffic interception, or inclusion in a botnet.

Recommendation

Immediately update the Linksys E1200 firmware to the latest available version. If no update is provided, consider replacing the device with a supported model.

Original NVD description (English source)

Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.