Soumettre #584367: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) OS Command Injectioninformation

TitreLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500(1.0.013.001) RE6250(1.0.04.001) RE6300(1.2.07.001) RE6350(1.0.04.001) RE7000(1.1.05.003) RE9000(1.0.04.002) OS Command Injection
DescriptionWe found an command Injection vulnerability in Linksys router with firmware which was released recently, allows remote attackers to execute arbitrary OS commands from a crafted request.In RP_checkFWByBBS function, type、ch、ssidhex、security、extch、pwd、mode、ip、nm、gw is directly passed by the attacker, so we can control the type、ch、ssidhex、security、extch、pwd、mode、ip、nm、gw to attack the OS.
La source⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys/vuln_8/8.md
Utilisateur
 pjqwudi (UID 85106)
Soumission25/05/2025 04:44 (il y a 1 Année)
Modérer01/06/2025 19:06 (8 days later)
StatutAccepté
Entrée VulDB310784 [Linksys RE6500/RE6250/RE6300/RE6350/RE7000/RE9000 jusqu’à 1.2.07.001 /goform/RP_checkFWByBBS type/ch/ssidhex/security/extch/pwd/mode/ip/nm/gw élévation de privilèges]
Points20

Interested in the pricing of exploits?

See the underground prices here!