E9450 Sg Firmware
Monthly
An authentication bypass in the Linksys E9450 (E9450-SG) router firmware 1.2.00.052 lets an attacker who already sits on the same LAN or Wi-Fi segment reach certain administrative functions by sending a crafted URL, without supplying any login credentials. No authentication, user interaction, or non-default configuration is required once adjacent-network access exists, yielding high confidentiality, integrity, and availability impact (CVSS 3.1 base 8.8, AV:A/PR:N). Publicly available exploit code exists and the flaw is documented in Singapore CSA alert AL-2025-118; there is no CISA KEV entry, so confirmed in-the-wild exploitation is not established, and the exposure is bounded by the adjacent-network prerequisite and the narrow single-firmware-build footprint.
An authentication bypass in the Linksys E9450 (E9450-SG) router firmware 1.2.00.052 lets an attacker who already sits on the same LAN or Wi-Fi segment reach certain administrative functions by sending a crafted URL, without supplying any login credentials. No authentication, user interaction, or non-default configuration is required once adjacent-network access exists, yielding high confidentiality, integrity, and availability impact (CVSS 3.1 base 8.8, AV:A/PR:N). Publicly available exploit code exists and the flaw is documented in Singapore CSA alert AL-2025-118; there is no CISA KEV entry, so confirmed in-the-wild exploitation is not established, and the exposure is bounded by the adjacent-network prerequisite and the narrow single-firmware-build footprint.