CVE-2024-40495

8.0 highEPSS 0.8%

High (8.0) in linksys e2500 firmware. EPSS 0.8% chance of exploitation in the next 30 days.

A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function.

Severity

CVSS 3.1

8.0 high

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.8% chance of exploitation in the next 30 days; higher than 55% of CVEs (scores of 2026-10-31)
CWE: CWE-94
Published: 2024-07-24
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

linksys:e2500_firmware

References

https://github.com/iotaMing/IOT-CVE/blob/master/Linksys/CVE-2024-40495/CVE-2024-40495.pdf
https://github.com/iotaMing/IOT-CVE/blob/master/Linksys/CVE-2024-40495/CVE-2024-40495.pdf

Check your stack JSON