CVE-2024-27497

HIGH EXPLOITED NUCLEI

Linksys E2000 1.0.06 position.js Improper Authentication

Title source: nuclei

Description

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

Nuclei Templates (1)

Linksys E2000 1.0.06 position.js Improper Authentication
HIGHVERIFIEDby DhiyaneshDk
Shodan: product:"Linksys E2000 WAP http config"
FOFA: app="LINKSYS-E2000"

References (1)

Scores

CVSS v3 8.8
EPSS 0.8192
EPSS Percentile 99.2%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

VulnCheck KEV 2024-03-19
CWE
CWE-284
Status published
Products (1)
linksys/e2000_firmware 1.0.06
Published Mar 01, 2024
Tracked Since Feb 18, 2026