← Vulnerability feed

Vulnerability record · CVE-2002-2159 · published 31 December 2002

CVE-2002-2159: Linksys befsr11 vulnerability

Linksys · Befsr11

Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.

10.0 CVSS 2.0 High EPSS 2.4% · top 16.3%
10.0CVSS 2.0 base score
2.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
3Affected product versions listed by NVD
6References
16 Jun 2026Last modified by NVD

Description

Linksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration even when the "Block WAN" and "Remote Admin" options are disabled, which allows remote attackers to gain access.

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

3 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.iss.net/security_center/static/9330.php
http://www.securiteam.com/securitynews/5OP022K7GE.html Vendor Advisory
http://www.securityfocus.com/bid/4987
http://www.iss.net/security_center/static/9330.php
http://www.securiteam.com/securitynews/5OP022K7GE.html Vendor Advisory
http://www.securityfocus.com/bid/4987

Track CVE-2002-2159 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

6.4CVE-2002-0109Linksys befn2ps4 vulnerabilityLinksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause…EPSS 1.7%5.0CVE-2004-0580Linksys befcmu10 vulnerabilityDHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer co…EPSS 8.0%5.0CVE-2002-1312Linksys befn2ps4 vulnerabilityBuffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable…EPSS 2.0%5.0CVE-2002-1236Linksys befsr41 vulnerabilityThe remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of s…EPSS 7.1%5.0CVE-2001-1117Linksys befsr41 vulnerabilityLinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2002-2159), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.