Lucene search
K

13 matches found

RedhatCVE
RedhatCVE
added 2025/11/14 12:1 a.m.2 views

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

5.4CVSS8.5AI score0.00182EPSS
Exploits1References1
EUVD
EUVD
added 2025/11/13 6:31 p.m.3 views

EUVD-2025-175299

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

5.4CVSS7.9AI score0.00182EPSS
Exploits1References4
NVD
NVD
added 2025/11/13 4:15 p.m.4 views

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

5.4CVSS0.00182EPSS
Exploits1References3
OSV
OSV
added 2025/11/13 4:15 p.m.0 views

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

5.4CVSS6.2AI score0.00182EPSS
Exploits1References3
Vulnrichment
Vulnrichment
added 2025/11/13 12:0 a.m.1 views

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

8AI score0.00182EPSS
Exploits1References3
CVE
CVE
added 2025/11/13 12:0 a.m.8 views

CVE-2025-60689

CVE-2025-60689 affects Linksys E1200 v2 routers (firmware E1200_v2.0.11.001_us.tar.gz). The issue is an unauthenticated command-injection in the httpd Start_EPI function: user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system commands an...

5.4CVSS8.1AI score0.00182EPSS
Exploits1References3Affected Software1
Cvelist
Cvelist
added 2025/11/13 12:0 a.m.4 views

CVE-2025-60689

An unauthenticated command injection vulnerability exists in the StartEPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200v2.0.11.001us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wlant, wlssid, wlrate, ttcpnum, ttcpip, ttcpsize are concatenated in...

0.00182EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2025/11/13 12:0 a.m.3 views

PT-2025-46857

An unauthenticated command injection vulnerability exists in the Start EPI function of the httpd binary on Linksys E1200 v2 routers Firmware E1200 v2.0.11.001 us.tar.gz. The vulnerability occurs because user-supplied CGI parameters wl ant, wl ssid, wl rate, ttcp num, ttcp ip, ttcp size are...

8.5AI score0.00182EPSS
Exploits1References4
RedhatCVE
RedhatCVE
added 2025/05/23 5:55 a.m.1 views

CVE-2023-31742

There is a command injection vulnerability in the Linksys WRT54GL router with firmware version 4.30.18.006. If an attacker gains web management privileges, they can inject commands into the post request parameters wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS7.8AI score0.73813EPSS
Exploits1References1
ATTACKERKB
ATTACKERKB
added 2023/05/23 1:15 a.m.1 views

CVE-2023-31741

There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters wlssid, wlant, wlrate, WLattenctl, ttcpnum, ttcpsize in the httpd s StartEPI function,...

7.2CVSS5.8AI score0.09076EPSS
Exploits1References3
CNNVD
CNNVD
added 2023/05/22 12:0 a.m.2 views

Linksys WRT54GL 命令注入漏洞

Linksys WRT54GL is a wireless router from Linksys USA. A security vulnerability exists in Linksys WRT54GL version 4.30.18.006. By exploiting this vulnerability to gain web administrative privileges, an attacker can inject commands into the post request parameters wlant, wlrate, wlattenctl, ttcpnu...

7.2CVSS7.1AI score0.73813EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/05/22 12:0 a.m.3 views

PT-2023-23443 · Linksys · Linksys Wrt54G

Name of the Vulnerable Software and Affected Versions: Linksys WRT54GL router version 4.30.18.006 Description: The issue is a command injection vulnerability. If an attacker gains web management privileges, they can inject commands into the post request parameters wl ant, wl rate, WL atten ctl,...

7.2CVSS7.3AI score0.73813EPSS
Exploits1References5
OSV
OSV
added 2023/01/09 9:15 p.m.2 views

CVE-2022-43970

A buffer overflow vulnerability exists in Linksys WRT54GL Wireless-G Broadband Router with firmware = 4.30.18.006. A stack-based buffer overflow in the StartEPI function within the httpd binary allows an authenticated attacker with administrator privileges to execute arbitrary commands on the...

7.2CVSS6.4AI score
Exploits0References3
Rows per page
Query Builder