Linksys E8450 userEmail Command Injection Vulnerability

The Linksys E8450 is an E-series wireless router from Linksys USA. A command injection vulnerability exists in the Linksys E8450 v1.2.00.360516, which stems from userEmail failing to properly filter constructed command special characters, commands, and more. An attacker can exploit this...

CVE-2024-57539

Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail...

CVE-2024-57539

The Linksys E8450 wireless router, specifically running firmware version v1.2.00.360516 , is susceptible to a command injection vulnerability. The root cause is a failure in the userEmail component to properly filter special characters and commands, which stems from a lack of protective measures ...