CVE-2024-27497

HIGH EXPLOITED NUCLEI

Linksys E2000 1.0.06 position.js Improper Authentication

Title source: nuclei
STIX 2.1

Exploitation Summary

CVE-2024-27497 has been observed exploited in the wild (reported by VulnCheck KEV). A Nuclei detection template is also available.

Description

Linksys E2000 Ver.1.0.06 build 1 is vulnerable to authentication bypass via the position.js file.

Nuclei Templates (1)

Linksys E2000 1.0.06 position.js Improper Authentication
HIGHVERIFIEDby DhiyaneshDk
Shodan: product:"Linksys E2000 WAP http config"
FOFA: app="LINKSYS-E2000"

References (1)

Core 1

Scores

CVSS v3 8.8
EPSS 0.2646
EPSS Percentile 97.7%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

VulnCheck KEV 2024-03-19
CWE
CWE-284
Status published
Products (1)
linksys/e2000_firmware 1.0.06
Published Mar 01, 2024
Tracked Since Feb 18, 2026