Linksys E9450-SG Router Administration Access Vulnerability

A vulnerability in the Linksys E9450-SG router, specifically in version 1.2.00.052, allows an attacker with local network access to send a specially crafted URL that bypasses authentication and accesses certain administration functions. This vulnerability has a CVSS score of 8.8, indicating its high severity.

Impact

Exploitation of this vulnerability could lead to unauthorized access to administrative functions of the router, without the need for login credentials.

Remediation

As the Linksys E9450-SG has reached End-of-Life status, no firmware update is planned. Users are advised to disable remote administration, restrict router management access to trusted devices on the local network, avoid enabling Telnet access, and consider upgrading to a model actively supported by Linksys.