How severe is CVE-2002-0109?

CVE-2002-0109 has a CVSS 2.0 base score of 6.4, rated medium severity.

Is CVE-2002-0109 being actively exploited?

It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.

What products are affected by CVE-2002-0109?

CVE-2002-0109 primarily affects Linksys Befn2ps4. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.

How do I fix CVE-2002-0109?

Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.

When was CVE-2002-0109 published?

CVE-2002-0109 was published on 2002-03-25 and last updated on 2026-06-16.

CVE-2002-0109

CVE-2002-0109 is a medium-severity vulnerability in Linksys Befn2ps4 with a CVSS 2.0 base score of 6.4. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.

Key facts

Severity: Medium (CVSS 2.0 base score 6.4)
EPSS exploit prediction: 2% (74th percentile)
Actively exploited: Not listed in CISA KEV
Affected product: Linksys Befn2ps4
Published: 2002-03-25
Last modified: 2026-06-16

Description

Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.

Frequently asked questions

What is CVE-2002-0109?: Linksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause a denial of service via an SNMP query for the default community string "public," which causes the router to change its configuration and send SNMP trap information back to the system that initiated the query.
How severe is CVE-2002-0109?: CVE-2002-0109 has a CVSS 2.0 base score of 6.4, rated medium severity.
Is CVE-2002-0109 being actively exploited?: It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 2% (74th percentile), an estimate of the probability of exploitation in the next 30 days.
What products are affected by CVE-2002-0109?: CVE-2002-0109 primarily affects Linksys Befn2ps4. In total, 3 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
How do I fix CVE-2002-0109?: Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
When was CVE-2002-0109 published?: CVE-2002-0109 was published on 2002-03-25 and last updated on 2026-06-16.

References

Affected products (3)

cpe:2.3:h:linksys:befn2ps4:0.0:*:*:*:*:*:*:*
cpe:2.3:h:linksys:befsr41:0.0:*:*:*:*:*:*:*
cpe:2.3:h:linksys:befsr81:*:*:*:*:*:*:*:*