CVE-2004-0580
Medium
Description
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
SeverityMedium
CVSS5.0
Exploit probability—
ProductLinksys Befsr11
PublishedAug 6, 2004
First seenAug 6, 2004
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linksys befsr11 | 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3, 1.44 | — |
| linksys befcmu10 | No range specified | — |
| linksys befn2ps4 | No range specified, 1.42.7 | — |
| linksys befsr41 | 1.35, 1.36, 1.37, 1.38.5, 1.39, 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3, 1.44, 1.45.7 | — |
| linksys befsr41w | No range specified | — |
| linksys befsr81 | No range specified, 2.42.7.1, 2.44 | — |
| linksys befsru31 | 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3, 1.44 | — |
| linksys befsx41 | 1.42.7, 1.43, 1.43.3, 1.43.4, 1.44, 1.44.3, 1.45.3 | — |
| linksys befvp41 | No range specified, 1.39.64, 1.40.3f, 1.40.4, 1.42.7 | — |
| linksys rv082 | No range specified | — |
| linksys wap55ag | 1.0.7 | — |
| linksys wrt54g | 1.42.3, 2.00.8 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.