CVE-2017-17411 is a critical remote code execution vulnerability affecting Linksys WVBR0 devices, specifically within their web management portal. This flaw, due to improper user data validation before a system call, allows unauthenticated attackers to execute arbitrary code with root privileges. With a CVSS score of 9.8 (CRITICAL) and an EPSS score indicating high exploitability, the vulnerability poses a severe risk. Exploit code is publicly available via Metasploit and ExploitDB, and it has garnered community attention and media coverage, including a SecurityWeek article highlighting its critical nature.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.41CPE matchmatch criteria | cpe:2.3:o:linksys:wvbr0_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.