CVE-2004-0580
UnknownEPSS 7.99%
Last modified
CVE-2004-0580 is a vulnerability of currently unknown severity. DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.. EPSS estimates a 7.99% chance of exploitation in the next 30 days.
Description
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Linksys | Befcmu10 | All versions |
| Linksys | Befn2ps4 | All versions |
| Linksys | Befn2ps4 | 1.42.7 |
| Linksys | Befsr11 | 1.40.2 |
| Linksys | Befsr11 | 1.41 |
| Linksys | Befsr11 | 1.42.3 |
| Linksys | Befsr11 | 1.42.7 |
| Linksys | Befsr11 | 1.43 |
| Linksys | Befsr11 | 1.43.3 |
| Linksys | Befsr11 | 1.44 |
| Linksys | Befsr41 | 1.35 |
| Linksys | Befsr41 | 1.36 |
| Linksys | Befsr41 | 1.37 |
| Linksys | Befsr41 | 1.38.5 |
| Linksys | Befsr41 | 1.39 |
| Linksys | Befsr41 | 1.40.2 |
| Linksys | Befsr41 | 1.41 |
| Linksys | Befsr41 | 1.42.3 |
| Linksys | Befsr41 | 1.42.7 |
| Linksys | Befsr41 | 1.43 |
| Linksys | Befsr41 | 1.43.3 |
| Linksys | Befsr41 | 1.44 |
| Linksys | Befsr41 | 1.45.7 |
| Linksys | Befsr41w | All versions |
| Linksys | Befsr81 | All versions |
| Linksys | Befsr81 | 2.42.7.1 |
| Linksys | Befsr81 | 2.44 |
| Linksys | Befsru31 | 1.40.2 |
| Linksys | Befsru31 | 1.41 |
| Linksys | Befsru31 | 1.42.3 |
| Linksys | Befsru31 | 1.42.7 |
| Linksys | Befsru31 | 1.43 |
| Linksys | Befsru31 | 1.43.3 |
| Linksys | Befsru31 | 1.44 |
| Linksys | Befsx41 | 1.42.7 |
| Linksys | Befsx41 | 1.43 |
| Linksys | Befsx41 | 1.43.3 |
| Linksys | Befsx41 | 1.43.4 |
| Linksys | Befsx41 | 1.44 |
| Linksys | Befsx41 | 1.44.3 |
| Linksys | Befsx41 | 1.45.3 |
| Linksys | Befvp41 | All versions |
| Linksys | Befvp41 | 1.39.64 |
| Linksys | Befvp41 | 1.40.3f |
| Linksys | Befvp41 | 1.40.4 |
| Linksys | Befvp41 | 1.42.7 |
| Linksys | Rv082 | All versions |
| Linksys | Wap55ag | 1.0.7 |
| Linksys | Wrt54g | 1.42.3 |
| Linksys | Wrt54g | 2.00.8 |
References
- http://www.securityfocus.com/bid/10329Exploit, Vendor Advisory
- http://www.securityfocus.com/bid/10329Exploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2004-0580?
DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.
How severe is CVE-2004-0580?
Severity scoring for CVE-2004-0580 is pending analysis. The EPSS model estimates a 7.99% probability of exploitation in the next 30 days.
How do I fix CVE-2004-0580?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2004
- CVE-2004-0574The Network News Transfer Protocol (NNTP) component of Micro…
- CVE-2004-0575Integer overflow in DUNZIP32.DLL for Microsoft Windows XP, W…
- CVE-2004-0576The radius daemon (radiusd) for GNU Radius 1.1, when compile…
- CVE-2004-0577WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other …
- CVE-2004-0578WinGate 5.2.3 build 901 and 6.0 beta 2 build 942, and other …
- CVE-2004-0579Format string vulnerability in super before 3.23 allows loca…
- CVE-2004-0581ksymoops-gznm script in Mandrake Linux 9.1 through 10.0, and…
- CVE-2004-0582Unknown vulnerability in Webmin 1.140 allows remote attacker…
- CVE-2004-0583The account lockout functionality in (1) Webmin 1.140 and (2…
- CVE-2004-0584Unknown vulnerability in Horde IMP 3.2.3 and earlier, before…
- CVE-2004-0585Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
- CVE-2004-0586acpRunner ActiveX 1.2.5.0 allows remote attackers to execute…
Are you affected by CVE-2004-0580?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST