Critical · 9.8 CVE-2024-33789 EUVD-2024-31498GHSA-fj57-wwj6-8p79

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

Published May 3, 2024 · Updated Aug 2, 2024 · Assigned by mitre

Description

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

Advisories 1

WID-SEC-2024-1029 Linksys Router: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · May 5, 2024

References

https://github.com/ymkyu/CVE/tree/main/CVE-2024-33789