Lucene search
+L

CVE-2025-34037

🗓️ 24 Jun 2025 01:03:27Reported by VulnCheckType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 86 Views🌐 WEB

OS command injection in Linksys E-Series routers enables unauthorized command execution via CGI scripts.

Related
Detection
Affected
Refs
Paths
Social
ReporterTitlePublishedViews
Family
attackerkb
attackerkb
CVE-2025-34037
24 Jun 202501:15
–attackerkb
githubexploit
GithubExploit
Exploit for CVE-2025-34037
26 Mar 202621:55
–githubexploit
bdu_fstec
BDU FSTEC
Linksys Router Command Execution
24 Sep 202500:00
–bdu_fstec
circl
Circl
CVE-2025-34037
29 May 201815:50
–circl
cnnvd
CNNVD
Linksys E-Series security vulnerabilities
24 Jun 202500:00
–cnnvd
cvelist
Cvelist
CVE-2025-34037 Linksys Routers E/WAG/WAP/WES/WET/WRT-Series
24 Jun 202501:03
–cvelist
euvd
EUVD
EUVD-2025-18964
3 Oct 202520:07
–euvd
kitploit
Kitploit
CVE-2025-34037
26 Oct 202603:16
–kitploit
metasploit
Metasploit
Linksys E-Series TheMoon Remote Command Injection
13 Feb 201400:00
–metasploit
nvd
NVD
CVE-2025-34037
24 Jun 202501:15
–nvd
Rows per page
Vulners
CNA
Node
OR
linksyse4200Range0–1.0.06
linksyse3200Range0–1.0.05
linksyse3000Range0–1.0.06
linksyse2500_v1/v2Range0–2.0.00
linksyse2100l_v1Range0–1.0.05
linksyse1550Range0–1.0.03
linksyse1500_v1Range0–1.0.06
linksyse1200_v1Range0–1.0.04
linksyse1000_v1Range0–2.1.03
linksyse900_v1Range0–1.0.04
[
  {
    "vendor": "Linksys",
    "product": "E4200",
    "modules": [
      "Web Management Interface (tmUnblock.cgi and hndUnblock.cgi CGI scripts)"
    ],
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.06",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E3200",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.05",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E3000",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.06",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E2500 v1/v2",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.0.00",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E2100L v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.0.05",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E2000",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1550",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.0.03",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1500 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.06",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1200 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThanOrEqual": "1.0.04",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E1000 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "2.1.03",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Linksys",
    "product": "E900 v1",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "1.0.04",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unaffected"
  }
]
ParameterPositionPathDescriptionCWE
ttcp_iprequest body/tmUnblock.cgiOS command injection via the ttcp_ip parameter in a POST request.CWE-78
ttcp_iprequest body/hndUnblock.cgiOS command injection via the ttcp_ip parameter in a POST request.CWE-78

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation