What’s Vulnerable › Vulnerabilities
CVE-2004-0580
- Severity: medium (CVSS 5.0 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 8.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2004-08-06 · updated 2026-06-16
Description
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
Affected products
- Linksys Befcmu10: all versions
- Linksys Befn2Ps4: 1.42.7
- Linksys Befsr11: 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3 (+1)
- Linksys Befsr41: 1.35, 1.36, 1.37, 1.38.5, 1.39, 1.40.2 (+7)
- Linksys Befsr41W: all versions
- Linksys Befsr81: 2.42.7.1, 2.44
- Linksys Befsru31: 1.40.2, 1.41, 1.42.3, 1.42.7, 1.43, 1.43.3 (+1)
- Linksys Befsx41: 1.42.7, 1.43, 1.43.3, 1.43.4, 1.44, 1.44.3 (+1)
- Linksys Befvp41: 1.39.64, 1.40.3f, 1.40.4, 1.42.7
- Linksys Rv082: all versions
- Linksys Wap55Ag: 1.0.7
- Linksys Wrt54G: 1.42.3, 2.00.8
References
- http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=
- http://marc.info/?l=bugtraq&m=108662876129301&w=2
- http://secunia.com/advisories/11606
- http://securitytracker.com/alerts/2004/May/1010288.html
- http://www.osvdb.org/6325
- http://www.securityfocus.com/bid/10329
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16142
- http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li=
- http://marc.info/?l=bugtraq&m=108662876129301&w=2
- http://secunia.com/advisories/11606
- http://securitytracker.com/alerts/2004/May/1010288.html
- http://www.osvdb.org/6325
Get alerted when CVE-2004-0580 or the next vulnerability affects your stack