9 matches found
CVE-2024-33788
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
CVE-2024-33788
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
CVE-2024-33788
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint...
CVE-2024-33788
The CVE-2024-33788 belongs to Linksys E5600 firmware (v1.1.0.26). The issue is a command injection in the /API/info endpoint via the PinCode parameter due to insufficient input filtering, enabling arbitrary command execution. Impact is high (CVSSv3.1: AV Adjacent, AC L, PR L, UI N, C H, I H, A H)...
CVE-2024-33789
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint...
CVE-2024-33789
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint...
CVE-2024-33789
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint...
CVE-2024-33789
CVE-2024-33789 affects Linksys E5600 firmware v1.1.0.26, with a command injection vulnerability in the /API/info endpoint exploitable via the ipurl parameter. Root cause: improper handling/filtering of command-related characters in ipurl within runtime.pingTest(), enabling arbitrary command execu...
CVE-2024-33789
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint...