Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
History

Wed, 16 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.05368}

epss

{'score': 0.04026}


Sat, 12 Jul 2025 13:45:00 +0000

Type Values Removed Values Added
Metrics epss

{'score': 0.05368}


Fri, 11 Jul 2025 20:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'poc', 'Technical Impact': 'partial'}, 'version': '2.0.3'}


Fri, 11 Jul 2025 19:00:00 +0000

Type Values Removed Values Added
Description Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
Weaknesses CWE-78
References
Metrics cvssV3_1

{'score': 8.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L'}


cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2025-07-11T00:00:00.000Z

Updated: 2025-07-11T19:32:03.983Z

Reserved: 2013-04-29T00:00:00.000Z

Link: CVE-2013-3307

cve-icon Vulnrichment

Updated: 2025-07-11T19:31:54.255Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-07-11T19:15:22.793

Modified: 2025-07-15T13:14:49.980

Link: CVE-2013-3307

cve-icon Redhat

No data.