The vulnerability in the `apply.cgi` script of the Linksys E1500 and E2500 router microprogramming system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the apply.cgi script of the Linksys E1500 and E2500 router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informati...

CVE-2013-10062

A directory traversal vulnerability exists in Linksys router's web interface tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05, specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the nextpage POST parameter to access arbitrary files outside the...

Linksys E1500 安全漏洞

The Linksys E1500 is a wireless router from Linksys, USA. A security vulnerability exists in Linksys E1500 versions 1.0.00, 1.0.04, and 1.0.05, which stems from a directory traversal issue in the apply.cgi endpoint that could lead to information disclosure...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

Linksys E1500 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys E1500 Directory Traversal Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability which is present in...

Linksys E1500 Command Injection Vulnerability

The Linksys E1500 is a wireless router from Linksys USA. A command injection vulnerability exists in Linksys E1500 v1.0.06.001, which originates from an application that fails to properly filter construct command special characters, commands, etc. An authenticated attacker can use this...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

Linksys E1500 安全漏洞

The Linksys E1500 is a wireless router from Linksys USA. A command injection vulnerability exists in Linksys E1500 v1.0.06.001, which originates from an application that fails to properly filter construct command special characters, commands, etc. An authenticated attacker can use this...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

CVE-2024-42633

CVE-2024-42633 describes a command-injection in the Linksys E1500 httpd do_upgrade_post function in firmware v1.0.06.001, allowing an authenticated attacker to execute OS commands with root privileges. Several sources corroborate that the vulnerability originates from inadequate input handling in...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

PT-2024-30084 · Linksys · Linksys E1500

Name of the Vulnerable Software and Affected Versions: Linksys E1500 version 1.0.06.001 Description: A Command Injection vulnerability exists in the do upgrade post function of the httpd binary. As a result, an authenticated attacker can execute OS commands with root privileges. This could...

CVE-2024-42633: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

CVE-2013-10062

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/linksyse1500traversal.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:47:36+00:00| see...

Linksys E1500/E2500 Multiple Vulnerabilities

Linksys E1500/E2500 devices are prone to multiple vulnerabilities. This vulnerability was known to be exploited by the IoT Botnet SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Linksys E1500/E2500 Authenticated Command Execution

The remote Linksys router is affected by an authenticated command execution vulnerability. An authenticated remote attacker can use this vulnerability to execute operating system commands as root. This vulnerability has been used by the IoT Reaper botnet. C Tenable Network Security, Inc...

Linksys E1500/E2500 apply.cgi Remote Command Injection

No description provided by source...

Linksys E1500/E2500 - Multiple Vulnerabilities

No description provided by source...

Linksys E-Series TheMoon Remote Command Injection

This module requires Metasploit: http//metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'msf/core' class Metasploit3 'Linksys E-Series TheMoon Remote Command Injection', 'Description' = %q Some Linksys E-Series Routers are vulnerable to an...