DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously…

Description

DHCP on Linksys BEFSR11, BEFSR41, BEFSR81, and BEFSRU31 Cable/DSL Routers, firmware version 1.45.7, does not properly clear previously used buffer contents in a BOOTP reply packet, which allows remote attackers to obtain sensitive information.

Scores

EPSS (exploitation in 30 days)

8.0% · top 5.2% of all CVEs (3 Nov 2026)

Loading the EPSS history…

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 5.0.

Weakness

• n/a

Affected products

• n/a

  • affected n/a

References (7)

• http://linksys.custhelp.com/cgi-bin/linksys.cfg/php/enduser/std_adp.php?p_faqid=832&p_%20%5Ccreated=1086294093&p_sid=pU1X1idh&p_lva=&p_sp=cF9zcmNoPSZwX3NvcnRfYnk9JnBfZ3JpZHNvcnQ9%20%5CJnBfcm93X2NudD02NTQmcF9wYWdlPTE%2A&p_li= (opens in a new tab)x_refsource_CONFIRMx_transferred
• linksys-etherfast-bootp-dos(16142) (opens in a new tab)vdb-entryx_refsource_XFx_transferred
• 11606 (opens in a new tab)third-party-advisoryx_refsource_SECUNIAx_transferred
• 6325 (opens in a new tab)vdb-entryx_refsource_OSVDBx_transferred
• 1010288 (opens in a new tab)vdb-entryx_refsource_SECTRACKx_transferred
• 20040607 Linksys BEFSR41 DHCP vulnerability server leaks network data (opens in a new tab)mailing-listx_refsource_BUGTRAQx_transferred
• 10329 (opens in a new tab)vdb-entryx_refsource_BIDx_transferred

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2004-0580](https://trackcve.app/badge/CVE-2004-0580.svg)](https://trackcve.app/cve/CVE-2004-0580)

Record last updated 8 Aug 2024, 00:24 UTC.