PT-2024-28878 · Linksys · Linksys Router E2500

Published 2024-07-24 · Updated 2026-01-02 · CVE-2024-40495

Positive Technologies (AI Summary)

CVSS v3.1

8.0

High

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Linksys Router E2500 version 2.0.00

Description A vulnerability was discovered that allows authenticated attackers to execute arbitrary code via the hnd parentalctrl unblock function.

Recommendations For Linksys Router E2500 version 2.0.00, consider disabling the hnd parentalctrl unblock function as a temporary workaround until a patch is available.

Exploit

Fix

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2026-01053

CVE-2024-40495

Affected Products

Linksys Router E2500

References · 9

• 🔥 https://github.com/iotaMing/IOT-CVE/blob/master/Linksys/CVE-2024-40495/CVE-2024-40495.pdf · Exploit
• https://osv.dev/vulnerability/CVE-2024-40495 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-40495 · Security Note
• https://bdu.fstec.ru/vul/2026-01053 · Security Note
• http://linksys.com · Note
• http://e2500.com · Note
• https://vuldb.com/?id.272395 · Note
• https://t.me/cvedetector/1590 · Telegram Post
• https://t.me/cveNotify/147615 · Telegram Post