The vulnerability in the `apply.cgi` script of the Linksys E1500 and E2500 router microprogramming system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the apply.cgi script of the Linksys E1500 and E2500 router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informati...

Linksys E1500 安全漏洞

The Linksys E1500 is a wireless router from Linksys, USA. A security vulnerability exists in Linksys E1500 versions 1.0.00, 1.0.04, and 1.0.05, which stems from a directory traversal issue in the apply.cgi endpoint that could lead to information disclosure...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

Linksys E1500 Directory Traversal

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Linksys E1500 Directory Traversal Vulnerability', 'Description' = %q This module exploits a directory traversal vulnerability which is present in...

Linksys E1500 Command Injection Vulnerability

The Linksys E1500 is a wireless router from Linksys USA. A command injection vulnerability exists in Linksys E1500 v1.0.06.001, which originates from an application that fails to properly filter construct command special characters, commands, etc. An authenticated attacker can use this...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

PT-2024-30084 · Linksys · Linksys E1500

Name of the Vulnerable Software and Affected Versions: Linksys E1500 version 1.0.06.001 Description: A Command Injection vulnerability exists in the do upgrade post function of the httpd binary. As a result, an authenticated attacker can execute OS commands with root privileges. This could...

CVE-2024-42633

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

Linksys E1500 安全漏洞

The Linksys E1500 is a wireless router from Linksys USA. A command injection vulnerability exists in Linksys E1500 v1.0.06.001, which originates from an application that fails to properly filter construct command special characters, commands, etc. An authenticated attacker can use this...

CVE-2024-42633: Improper Neutralization of Special Elements used in an OS Command

A Command Injection vulnerability exists in the doupgradepost function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges...

CVE-2024-42633

CVE-2024-42633 describes a command-injection in the Linksys E1500 httpd do_upgrade_post function in firmware v1.0.06.001, allowing an authenticated attacker to execute OS commands with root privileges. Several sources corroborate that the vulnerability originates from inadequate input handling in...

CVE-2013-10062

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/linksyse1500traversal.rb 2025-10-23 21:12:57+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:47:36+00:00| see...

Linksys E1500/E2500 apply.cgi Remote Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Linksys E1500/E2500 apply.cgi Remote...

Multiple Vulnerabilities in Linksys E1500/E2500

Device Name: Linksys E1500 / E2500 Vendor: Linksys ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router with SpeedBoost. It lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Linksys E1500 to sha...

Linksys E1500/E2500 - Multiple Vulnerabilities

Device Name: Linksys E1500 / E2500 Vendor: Linksys ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router with SpeedBoost. It lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Linksys E1500 to sha...

Linksys E1500 / E2500 XSS / CSRF / Traversal / Command Injection

Device Name: Linksys E1500 / E2500 Vendor: Linksys ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router with SpeedBoost. It lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Linksys E1500 to sha...

Linksys E1500 / E2500 CSRF / XSS / Command Execution / Traversal

Linksys models E1500 and E2500 suffer from cross site request forgery, cross site scripting, OS command injection, and directory traversal vulnerabilities. Device Name: Linksys E1500 / E2500 Vendor: Linksys ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router wit...

Linksys E1500 / E2500 CSRF / XSS / Command Execution / Traversal

Device Name: Linksys E1500 / E2500 Vendor: Linksys ============ Device Description: ============ The Linksys E1500 is a Wireless-N Router with SpeedBoost. It lets you access the Internet via a wireless connection or through one of its four switched ports. You can also use the Linksys E1500 to sha...