CVE-2013-3307

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

Score

CVSS 3.1 8.3 High

Status

Deferred - cve@mitre.org

Published

2025-07-11

Last modified

2025-07-11

Weaknesses

CWE-78

Affected products

• E1000 (Linksys)
• E1200 (Linksys)
• E3200 (Linksys)

References

• https://web.archive.org/web/20140421001918/https://www.trustwave.com/spiderlabs/advisories/TWSL2013-008.txt