CVE-2024-27497

Linksys E2000 router (Firmware 1.0.06 build 1) is affected by CVE-2024-27497 due to an authentication bypass in the position.js file. The vulnerability enables unauthorized access to the device. Remediation is to upgrade to a patched firmware version as indicated in the connected documents; explo...

CVE-2023-31741

Affected product: Linksys E2000 router (firmware 1.0.06). Vulnerable component: httpd Start_EPI() function; vulnerability arises from command injection in POST parameters wl_ssid, wl_ant, wl_rate, WL_atten_ctl, ttcp_num, ttcp_size, enabling shell privileges when web management is compromised. Imp...

CVE-2023-31740

CVE-2023-31740 affects Linksys E2000 routers (firmware 1.0.06). A command injection in the apply.cgi interface allows an attacker with web management privileges to inject commands via WL_atten_bb, WL_atten_radio, and WL_atten_ctl in post requests, potentially granting shell privileges. Documented...