CVE-2024-48286

Linksys E3000 1.0.06.002US is vulnerable to command injection via the diagpingstart function...

CVE-2024-48286

The Linksys E3000 router (version 1.0.06.002_US ) is vulnerable to command injection via the diag_ping_start function. The root cause is a lack of measures to clean data at the control level, which allows a remote attacker to submit a special request to execute arbitrary commands in an applicatio...