Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2013-3307

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip par

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
mitre

Description

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Linksys E1000

Default version status: unknown

  • 0 to ≤ 2.1.02affected

Linksys E1200

Default version status: unaffected

  • 0 to < 2.0.05affected

Linksys E3200

Default version status: unaffected

  • 0 to ≤ 1.0.04affected

References