Unscored severity · published Aug 6, 2004
CVE-2004-0580
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply…
–
CVSS
8%
EPSS
No
On KEV
Description
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
Exploitation
Is it being used?
Exploit prediction (EPSS)8.0% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BE
Befcmu10 · Linksys
All versions, or not specified · source: NVD
BE
Befn2ps4 · Linksys
1.42.7 · source: NVD
BE
Befsr11 · Linksys
1.40.2; 1.41; 1.42.3; 1.42.7; 1.43; 1.43.3; +1 more · source: NVD
BE
Befsr41 · Linksys
1.35; 1.36; 1.37; 1.38.5; 1.39; 1.40.2; +7 more · source: NVD
BE
Befsr41w · Linksys
All versions, or not specified · source: NVD
BE
Befsr81 · Linksys
2.42.7.1; 2.44 · source: NVD
BE
Befsru31 · Linksys
1.40.2; 1.41; 1.42.3; 1.42.7; 1.43; 1.43.3; +1 more · source: NVD
BE
Befsx41 · Linksys
1.42.7; 1.43; 1.43.3; 1.43.4; 1.44; 1.44.3; +1 more · source: NVD
BE
Befvp41 · Linksys
1.39.64; 1.40.3f; 1.40.4; 1.42.7 · source: NVD
RV
Rv082 · Linksys
All versions, or not specified · source: NVD
WA
Wap55ag · Linksys
1.0.7 · source: NVD
WR
Wrt54g · Linksys
1.42.3; 2.00.8 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0580
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0580
linksys.custhelp.com
http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=
marc.info
http://marc.info/?l=bugtraq&m=108662876129301&w=2
secunia.com
http://secunia.com/advisories/11606
securitytracker.com
http://securitytracker.com/alerts/2004/May/1010288.html
www.osvdb.org
http://www.osvdb.org/6325
Exploit
http://www.securityfocus.com/bid/10329