Linksys E1200 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Linksys E1200 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2022-38555 — CVSS 9.8 (critical): Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.
• CVE-2025-60690 — CVSS 8.8 (high): A stack-based buffer overflow exists in the get_merge_ipaddr function of the httpd binary on Linksys E1200 v2 routers (Firmware…
• CVE-2025-60691 — CVSS 8.8 (high): A stack-based buffer overflow exists in the httpd binary of Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The apply_cgi…
• CVE-2025-60692 — CVSS 8.4 (high): A stack-based buffer overflow vulnerability exists in the libshared.so library of Cisco Linksys E1200 v2 routers (Firmware…
• CVE-2025-60694 — CVSS 7.5 (high): A stack-based buffer overflow exists in the validate_static_route function of the httpd binary on Linksys E1200 v2 routers (Firmware…
• CVE-2018-3955 — CVSS 7.2 (high): An exploitable operating system command injection exists in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and…
• CVE-2018-3954 — CVSS 7.2 (high): Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are…
• CVE-2018-3953 — CVSS 7.2 (high): Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are…
• CVE-2025-60693 — CVSS 6.5 (medium): A stack-based buffer overflow exists in the get_merge_mac function of the httpd binary on Linksys E1200 v2 routers (Firmware…
• CVE-2025-60689 — CVSS 5.4 (medium): An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers…