GCVE - cpe:2.3:h:linksys:e7350:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:linksys:e7350:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Linksys (`6d3f2e7c-48a8-5a19-9a98-85960b5ae3c2`)
Product	E7350 (`dc5d2c66-c1f8-53b9-b838-474641873d03`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-60695`	not_vulnerable	2026-06-08 07:37:27.021564	Details available A stack-based buffer overflow vulnerability exists in the mtk_dut binary of Linksys E7350 routers (Firmware 1.1.00.032). The function sub_4045A8 reads up to 256 bytes from /sys/class/net/%s/address into a local buffer and then copies it into caller-provided buffer a1 using strcpy without boundary checks. Since a1 is often allocated with significantly smaller sizes (20-32 bytes), local attackers controlling the contents of /sys/class/net/%s/address can trigger buffer overflows, leading to memory corruption, denial of service, or potential arbitrary code execution. Published: 2025-11-13T00:00:00.000Z Updated: 2026-07-05T01:19:59.966Z Open on db.gcve.eu Reference links https://www.linksys.com/ https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-E7350/CVE-2025-60695.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57228`	not_vulnerable	2026-06-08 06:56:13.428529	Details available Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_disable function. Published: 2025-01-10T00:00:00.000Z Updated: 2025-01-16T17:34:17.304Z Open on db.gcve.eu Reference links https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_1_vif_disable/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57227`	not_vulnerable	2026-06-08 06:56:13.428222	Details available Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the ifname parameter in the apcli_do_enr_pbc_wps function. Published: 2025-01-10T00:00:00.000Z Updated: 2025-01-16T17:35:15.350Z Open on db.gcve.eu Reference links https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_4_apcli_do_enr_pbc_wps/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57226`	not_vulnerable	2026-06-08 06:56:13.427793	Details available Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the iface parameter in the vif_enable function. Published: 2025-01-10T00:00:00.000Z Updated: 2025-01-15T20:28:44.191Z Open on db.gcve.eu Reference links https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_2_vif_enable/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57225`	not_vulnerable	2026-06-08 06:56:13.427491	Details available Linksys E7350 1.1.00.032 was discovered to contain a command injection vulnerability via the devname parameter in the reset_wifi function. Published: 2025-01-10T00:00:00.000Z Updated: 2025-01-13T20:08:35.342Z Open on db.gcve.eu Reference links https://github.com/yanggao017/vuln/blob/main/Linksys/E7350/CI_7_reset_wifi/README.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57224`	not_vulnerable	2026-06-08 06:56:13.427056	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57223`	not_vulnerable	2026-06-08 06:56:13.426462	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-57222`	not_vulnerable	2026-06-08 06:56:13.425825	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.