E2500 Firmware vulnerabilities

2 known vulnerabilities in E2500 Firmware from Linksys. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  E2500 Firmware: Improper Access Control

  CVE-2025-44654Jul 21, 2025LinksysEPSS 1.2%

  In Linksys E2500 3.0.04.002, the chroot_local_user option is enabled in the vsftpd configuration file. This could lead to unauthorized access to system files, privilege escalation, or use of the compromised server as a pivot point for internal network attacks.

• 8.0 High severity

  e2500_firmware: Improper Control of Generation of Code

  CVE-2024-40495Jul 24, 2024Linksys

  A vulnerability was discovered in Linksys Router E2500 with firmware 2.0.00, allows authenticated attackers to execute arbitrary code via the hnd_parentalctrl_unblock function.