Lucene search

K
LinksysE5600 Firmware

14 matches found

CVE
CVE
added 2024/05/06 1:15 p.m.98 views

CVE-2024-33788

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint.

8CVSS7.9AI score0.01929EPSS
CVE
CVE
added 2024/05/03 5:15 p.m.73 views

CVE-2024-33789

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the ipurl parameter at /API/info form endpoint.

9.8CVSS7.9AI score0.07467EPSS
CVE
CVE
added 2024/05/28 7:15 p.m.62 views

CVE-2023-30305

An issue discovered in Linksys E5600 routers allows attackers to hijack TCP sessions which could lead to a denial of service.

7.5CVSS7AI score0.00183EPSS
CVE
CVE
added 2025/03/21 5:15 p.m.60 views

CVE-2025-29227

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["pkgsize"] parameter.

6.3CVSS8.9AI score0.02399EPSS
CVE
CVE
added 2025/03/21 5:15 p.m.58 views

CVE-2025-29226

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["count"] parameter.

6.3CVSS8.5AI score0.02399EPSS
CVE
CVE
added 2025/03/21 5:15 p.m.54 views

CVE-2025-29223

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the pt parameter in the traceRoute function.

6.3CVSS9AI score0.02399EPSS
CVE
CVE
added 2025/03/21 5:15 p.m.53 views

CVE-2025-29230

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.emailReg function. The vulnerability can be triggered via the pt["email"] parameter.

8.6CVSS8.8AI score0.03021EPSS
CVE
CVE
added 2025/05/06 4:15 p.m.51 views

CVE-2025-45491

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter.

9.8CVSS8.1AI score0.01008EPSS
CVE
CVE
added 2025/01/15 12:15 a.m.49 views

CVE-2025-22997

A stored cross-site scripting (XSS) vulnerability in the prf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter.

4.8CVSS5.4AI score0.00041EPSS
CVE
CVE
added 2025/01/15 12:15 a.m.48 views

CVE-2025-22996

A stored cross-site scripting (XSS) vulnerability in the spf_table_content component of Linksys E5600 Router Ver. 1.1.0.26 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the desc parameter.

4.8CVSS5.4AI score0.00041EPSS
CVE
CVE
added 2025/05/06 4:15 p.m.46 views

CVE-2025-45487

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function.

9.8CVSS8AI score0.01041EPSS
CVE
CVE
added 2025/05/06 4:15 p.m.45 views

CVE-2025-45490

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter.

9.8CVSS8.2AI score0.01029EPSS
CVE
CVE
added 2025/05/06 4:15 p.m.44 views

CVE-2025-45488

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter.

9.8CVSS8AI score0.01409EPSS
CVE
CVE
added 2025/05/06 4:15 p.m.43 views

CVE-2025-45489

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter.

9.8CVSS8AI score0.01029EPSS