Filtered by vendor Linksys Subscriptions
Filtered by product Wrt160nv2 Subscriptions
Total 1 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2013-10058 1 Linksys 1 Wrt160nv2 2025-08-05 N/A
An authenticated OS command injection vulnerability exists in various Linksys router models (tested on WRT160Nv2) running firmware version v2.0.03 via the apply.cgi endpoint. The web interface fails to properly sanitize user-supplied input passed to the ping_size parameter during diagnostic operations. An attacker with valid credentials can inject arbitrary shell commands, enabling remote code execution.