← Vulnerability feed

Vulnerability record · CVE-2005-4257 · published 15 December 2005

CVE-2005-4257: Linksys befw11s4 vulnerability

Linksys · Befw11s4

Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.

7.8 CVSS 2.0 High EPSS 1.4% · top 28.0%
7.8CVSS 2.0 base score
1.4%EPSS exploitation probability, 30 days
NoNot in CISA KEV
4Affected product versions listed by NVD
2References, 2 tagged exploit
16 Jun 2026Last modified by NVD

Description

Linksys WRT54GS and BEFW11S4 allows remote attackers to cause a denial of service (device crash) via an IP packet with the same source and destination IPs and ports, and with the SYN flag set (aka LAND). NOTE: the provenance of this issue is unknown; the details are obtained solely from the BID.

AV:N/AC:L/Au:N/C:N/I:N/A:C

Affected products

4 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://www.securityfocus.com/bid/15861 Exploit
http://www.securityfocus.com/bid/15861 Exploit

Track CVE-2005-4257 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

7.5CVE-2011-4499Cisco linksys wrt54g router firmware vulnerabilityThe UPnP IGD implementation in the Broadcom UPnP stack on the Cisco Linksys WRT54G with firmware before 4.30.5, WRT54GS v1 through v3 with firmware b…EPSS 1.3%7.5CVE-2005-2589Linksys wrt54gs vulnerabilityUnknown vulnerability in Linksys WRT54GS wireless router with firmware 4.50.6, with WPA Personal/TKIP authentication enabled, allows remote clients t…EPSS 1.2%5.0CVE-2002-1865D-link di-804 vulnerabilityBuffer overflow in the Embedded HTTP server, as used in (1) D-Link DI-804 4.68, Dl-704 V2.56b6, and Dl-704 V2.56b5 and (2) Linksys Etherfast BEFW11S4…EPSS 2.9%5.0CVE-2002-1312Linksys befn2ps4 vulnerabilityBuffer overflow in the Web management interface in Linksys BEFW11S4 wireless access point router 2 and BEFSR11, BEFSR41, and BEFSRU31 EtherFast Cable…EPSS 2.0%

Source: NIST National Vulnerability Database (record CVE-2005-4257), CISA KEV, FIRST EPSS (scores of 2026-09-26). This page is refreshed as NVD updates the record.