Linksys E8450 userEmail Command Injection Vulnerability

The Linksys E8450 is an E-series wireless router from Linksys USA. A command injection vulnerability exists in the Linksys E8450 v1.2.00.360516, which stems from userEmail failing to properly filter constructed command special characters, commands, and more. An attacker can exploit this...

CVE-2024-57539

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail...

CVE-2024-57539

CVE-2024-57539 affects Linksys E8450 v1.2.00.360516. The issue is a command injection via the userEmail parameter, enabling arbitrary command execution. Root cause: inadequate input filtering in userEmail leads to command injection. Impact per provided data: high severity with partial confidentia...