E2500 Firmware vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

EF

Product

E2500 Firmware

by Linksys · last CVE Jul 21, 2025

5

CVEs

0

On KEV

9.8

Max CVSS

0

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 1High 4Medium 0Low 0

Severity

All severities5 Critical1 High4 Medium0 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add E2500 Firmware to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2025-44654	9.8	1%	Jul 21	In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file Affected: 3.0.04.002
CVE-2024-40495	8.0	1%	Jul 24	A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function Affected: 2.0.00
CVE-2018-3955	7.2	5%	Oct 17	An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) Affected: 3.0.04
CVE-2018-3954	7.2	3%	Oct 17	Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection… Affected: 3.0.04
CVE-2018-3953	7.2	14%	Oct 17	Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection… Affected: 3.0.04