Unscored severity · published Aug 12, 2002
CVE-2002-0426
VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier…
–
CVSS
1.4%
EPSS
No
On KEV
Description
VPN Server module in Linksys EtherFast BEFVP41 Cable/DSL VPN Router before 1.40.1 reduces the key lengths for keys that are supplied via manual key entry, which makes it easier for attackers to crack the keys.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 72% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Befvp41 · Linksys
through 1.40.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-0426
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-0426
Vendor Advisory
http://online.securityfocus.com/archive/1/260613
Vendor Advisory
http://www.iss.net/security_center/static/8397.php
Patch
http://www.securityfocus.com/bid/4250
More from Befvp41
–
CVE-2006-0309
Linksys BEFVP41 VPN Router 2.0 with firmware 1.01.04 allows remote attackers on the local network, to cause a denial of service via IP packets with a null IP option length
–
CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply…
–
CVE-2002-1312
Buffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable/DSL routers with firmware…