CVE Catalog
CVE-2024-40495
HighCVSS 8.0Exploitation Probability (EPSS)
Elevated risk0.76%
51th percentile - higher than 51% of all known CVEs
Summary
A vulnerability in the Linksys E2500 router with firmware 2.0.00 allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function.
Risk Assessment
An attacker could take full control of the router, alter its configuration, intercept network traffic, or use it as a pivot point for further attacks within the internal network.
Recommendation
Immediately update the router firmware to the latest version provided by the vendor and restrict administrative access to trusted IP addresses only.
Other vulnerabilities in Linksys E2500
Original NVD description (English source)
A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function.