CVE-2024-27497

The Linksys E2000 wireless router (Ver.1.0.06 build 1) contains an authentication bypass vulnerability caused by a flaw in the authentication procedure. Specifically, the position.js file improperly writes session keys, allowing an attacker to access files that call to this script and obtain acti...

CVE-2023-31741

Affected product: Linksys E2000 router (firmware 1.0.06). Vulnerable component: httpd Start_EPI() function; vulnerability arises from command injection in POST parameters wl_ssid, wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size, enabling shell privileges when web management is compromised. Imp...

CVE-2023-31740

CVE-2023-31740 affects Linksys E2000 routers (firmware 1.0.06). A command injection in the apply.cgi interface allows an attacker with web management privileges to inject commands via WL_atten_bb, WL_atten_radio, and WL_atten_ctl in post requests, potentially granting shell privileges. Documented...