PT-2025-1324 · Undefined · Undefined

Published 2025-01-07 · Updated 2025-09-16 · CVE-2013-3307

Positive Technologies (AI Summary)

CVSS v3.1

8.3

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions: Linksys E1000 versions through 2.1.02 Linksys E1200 versions prior to 2.0.05 Linksys E3200 versions through 1.0.04

Description: Linksys E1000, E1200, and E3200 devices are susceptible to OS command injection. The ping ip parameter within the apply.cgi script, accessible via TCP port 52000, allows injection of shell metacharacters.

Recommendations: Linksys E1000 versions through 2.1.02: Update to a later version than 2.1.02. Linksys E1200 versions prior to 2.0.05: Update to version 2.0.05 or later. Linksys E3200 versions through 1.0.04: Update to a later version than 1.0.04.

Exploit

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

CVE-2013-3307

Affected Products

Undefined

References · 10

• 🔥 https://exploit-db.com/exploits/26415 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2013-3307 · Security Note
• https://t.me/cvetracker/27592 · Telegram Post
• https://t.me/aptreports/22058 · Telegram Post
• https://t.me/cvenotify/128641 · Telegram Post
• https://t.me/aptreports/15229 · Telegram Post
• https://t.me/true_secator/6651 · Telegram Post
• https://web.archive.org/web/20140421001918/https://trustwave.com/spiderlabs/advisories/TWSL2013-008.txt · Note
• https://t.me/aptreports/15336 · Telegram Post
• https://t.me/aptreports/22022 · Telegram Post