← Vulnerability feed

Vulnerability record · CVE-2004-0580 · published 6 August 2004

CVE-2004-0580: Linksys befcmu10 vulnerability

Linksys · Befcmu10

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

5.0 CVSS 2.0 Medium EPSS 8.0% · top 5.4%
5.0CVSS 2.0 base score
8.0%EPSS exploitation probability, 30 days
NoNot in CISA KEV
12Affected product versions listed by NVD
14References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

AV:N/AC:L/Au:N/C:P/I:N/A:N

Affected products

12 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1
http://marc.info/?l=bugtraq&m=108662876129301&w=2
http://secunia.com/advisories/11606
http://securitytracker.com/alerts/2004/May/1010288.html
http://www.osvdb.org/6325
http://www.securityfocus.com/bid/10329 ExploitVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16142
http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1
http://marc.info/?l=bugtraq&m=108662876129301&w=2
http://secunia.com/advisories/11606
http://securitytracker.com/alerts/2004/May/1010288.html
http://www.osvdb.org/6325
http://www.securityfocus.com/bid/10329 ExploitVendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16142

Track CVE-2004-0580 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2002-2159Linksys befsr11 vulnerabilityLinksys EtherFast Cable/DSL BEFSR11, BEFSR41 and BEFSRU31 with the firmware 1.42.7 upgrade installed opens TCP port 5678 for remote administration ev…EPSS 2.4%6.4CVE-2002-0109Linksys befn2ps4 vulnerabilityLinksys EtherFast BEFN2PS4, BEFSR41, and BEFSR81 Routers, and possibly other products, allow remote attackers to gain sensitive information and cause…EPSS 1.7%5.0CVE-2002-1312Linksys befn2ps4 vulnerabilityBuffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable…EPSS 2.0%5.0CVE-2002-1236Linksys befsr41 vulnerabilityThe remote management web server for Linksys BEFSR41 EtherFast Cable/DSL Router before firmware 1.42.7 allows remote attackers to cause a denial of s…EPSS 7.1%5.0CVE-2001-1117Linksys befsr41 vulnerabilityLinkSys EtherFast BEFSR41 Cable/DSL routers running firmware before 1.39.3 Beta allows a remote attacker to view administration and user passwords by…EPSS 1.8%

Source: NIST National Vulnerability Database (record CVE-2004-0580), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.