CVE-2025-4999

🗓️ 20 May 2025 21:00:11Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 1 Media mentions👁 47 Views🌐 WEB

Critical vulnerability in Linksys FGW3000 allows remote command injection via HTTP POST request.

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2025-4999	20 May 202521:16	–	circl
CNNVD	Linksys FGW3000-AH 注入漏洞	20 May 202500:00	–	cnnvd
Cvelist	CVE-2025-4999 Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub_4153FC command injection	20 May 202521:00	–	cvelist
EUVD	EUVD-2025-15959	3 Oct 202520:07	–	euvd
NVD	CVE-2025-4999	20 May 202521:15	–	nvd
Positive Technologies	PT-2025-22309 · Linksys · Linksys Fgw3000-Hk +1	26 Apr 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-4999	22 May 202521:21	–	redhatcve
Vulnrichment	CVE-2025-4999 Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub_4153FC command injection	20 May 202521:00	–	vulnrichment

NVD

Vulners

Node

linksys fgw3000-ah_firmwareRange≤1.0.17.000000

AND

linksys fgw3000-ahMatch-

Node

linksys fgw3000-hk_firmwareRange≤1.0.17.000000

AND

linksys fgw3000-hkMatch-

[
  {
    "vendor": "Linksys",
    "product": "FGW3000-AH",
    "versions": [
      {
        "version": "1.0.0",
        "status": "affected"
      },
      {
        "version": "1.0.1",
        "status": "affected"
      },
      {
        "version": "1.0.2",
        "status": "affected"
      },
      {
        "version": "1.0.3",
        "status": "affected"
      },
      {
        "version": "1.0.4",
        "status": "affected"
      },
      {
        "version": "1.0.5",
        "status": "affected"
      },
      {
        "version": "1.0.6",
        "status": "affected"
      },
      {
        "version": "1.0.7",
        "status": "affected"
      },
      {
        "version": "1.0.8",
        "status": "affected"
      },
      {
        "version": "1.0.9",
        "status": "affected"
      },
      {
        "version": "1.0.10",
        "status": "affected"
      },
      {
        "version": "1.0.11",
        "status": "affected"
      },
      {
        "version": "1.0.12",
        "status": "affected"
      },
      {
        "version": "1.0.13",
        "status": "affected"
      },
      {
        "version": "1.0.14",
        "status": "affected"
      },
      {
        "version": "1.0.15",
        "status": "affected"
      },
      {
        "version": "1.0.16",
        "status": "affected"
      },
      {
        "version": "1.0.17.000000",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  },
  {
    "vendor": "Linksys",
    "product": "FGW3000-HK",
    "versions": [
      {
        "version": "1.0.0",
        "status": "affected"
      },
      {
        "version": "1.0.1",
        "status": "affected"
      },
      {
        "version": "1.0.2",
        "status": "affected"
      },
      {
        "version": "1.0.3",
        "status": "affected"
      },
      {
        "version": "1.0.4",
        "status": "affected"
      },
      {
        "version": "1.0.5",
        "status": "affected"
      },
      {
        "version": "1.0.6",
        "status": "affected"
      },
      {
        "version": "1.0.7",
        "status": "affected"
      },
      {
        "version": "1.0.8",
        "status": "affected"
      },
      {
        "version": "1.0.9",
        "status": "affected"
      },
      {
        "version": "1.0.10",
        "status": "affected"
      },
      {
        "version": "1.0.11",
        "status": "affected"
      },
      {
        "version": "1.0.12",
        "status": "affected"
      },
      {
        "version": "1.0.13",
        "status": "affected"
      },
      {
        "version": "1.0.14",
        "status": "affected"
      },
      {
        "version": "1.0.15",
        "status": "affected"
      },
      {
        "version": "1.0.16",
        "status": "affected"
      },
      {
        "version": "1.0.17.000000",
        "status": "affected"
      }
    ],
    "modules": [
      "HTTP POST Request Handler"
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/CH13hh/tmp_store_cc/blob/main/FGW3000/1.md
vuldb	www.vuldb.com/
linksys	www.linksys.com/
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
supplicant_rnd_id_en	request body	cgi-bin/sysconf.cgi	Remote command injection via manipulation of supplicant_rnd_id_en parameter in /cgi-bin/sysconf.cgi using HTTP POST; affects Linksys FGW3000-AH/HK	CWE-74, CWE-77

12 Jun 2025 16:20Current

7.4High risk

Vulners AI Score7.4

CVSS 3.16.3 - 9.8

CVSS 45.3

CVSS 26.5

CVSS 36.3

EPSS0.01946

SSVC

vulnerability linksys fgw3000 command injection http post request