router firmware vulnerabilities and fixes

Recent CVEs affecting router firmware, with upgrade or downgrade steps. 4 tracked.

Also searched as: routerfirmware.

router firmware has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-04-23. Highest priority: CVE-2025-2773 (score 46/100).

• CVE-2025-2773 HIGH 7.2 MITIGATE BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability
• CVE-2025-2772 MEDIUM 6.5 MITIGATE BEC Technologies Multiple Routers Insufficiently Protected Credentials Information Disclosure Vulnerability
• CVE-2025-2771 MEDIUM 5.3 MITIGATE BEC Technologies Multiple Routers Authentication Bypass Vulnerability
• CVE-2025-2770 MEDIUM 6.5 MITIGATE BEC Technologies Multiple Routers Cleartext Password Storage Information Disclosure Vulnerability

FAQ

How do I fix router firmware vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is router firmware being exploited right now?

None of the tracked router firmware CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which router firmware CVE should I patch first?

CVE-2025-2773 currently ranks highest (46/100): BEC Technologies Multiple Routers sys ping Command Injection Remote Code Execution Vulnerability.

RSS feed for router firmware · ← Back to latest CVEs