Lucene search
K

CVE-2025-34037

🗓️ 24 Jun 2025 01:03:27Reported by VulnCheckType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 40 Views🌐 WEB

OS command injection in Linksys E-Series routers enables unauthorized command execution via CGI scripts.

Related
Detection
Affected
Refs
Paths
Social
Vulners
CNA
Node
linksyse4200Range01.0.06
OR
linksyse3200Range01.0.05
OR
linksyse3000Range01.0.06
OR
linksyse2500_v1/v2Range02.0.00
OR
linksyse2100l_v1Range01.0.05
OROR
linksyse1550Range01.0.03
OR
linksyse1500_v1Range01.0.06
OR
linksyse1200_v1Range01.0.04
OR
linksyse1000_v1Range02.1.03
OR
linksyse900_v1Range01.0.04
[
  {
    "vendor": "Linksys",
    "product": "E4200",
    "modules": [
      "Web Management Interface (tmUnblock.cgi and hndUnblock.cgi CGI scripts)"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.06",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E3200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.05",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E3000",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.06",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E2500 v1/v2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.0.00",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E2100L v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.0.05",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E2000",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1550",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.0.03",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1500 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.06",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1200 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.0.04",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1000 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.1.03",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E900 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.04",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
ParameterPositionPathDescriptionCWE
ttcp_iprequest body/tmUnblock.cgiOS command injection via ttcp_ip parameter in tmUnblock.cgi enabling unauthenticated RCECWE-78
ttcp_iprequest body/hndUnblock.cgiOS command injection via ttcp_ip parameter in hndUnblock.cgi enabling unauthenticated RCECWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation