AI analysis
Claude Opus · 8 Nov 2026, 10:21 CET
Linksys E5350 router setup wizard lets remote attackers act without authentication
Linksys E5350 firmware 1.0.00.037 has a missing-authentication flaw in its Setup Wizard, rated CVSS 3.1 10.0. A public exploit is reported and the vendor has not responded. No fix is listed, so restrict access to the router's management interface now.
In plain terms
The Linksys E5350 is a home and small-office Wi-Fi router. Its firmware version 1.0.00.037 contains a weakness in the Setup Wizard, the guided screens used to configure the router the first time. One function in the wizard that saves settings, including the router's administrator password, does not properly check that the person making the change is allowed to do so. Authentication means proving who you are, for example by logging in.
An attacker who can reach the router's web management interface could therefore change router settings without logging in. Anyone using this router model, especially in small offices or remote-work setups, should treat it as at risk until a fix or mitigation is in place.