| Titolo | Linksys Holdings, Inc. FGW3000-AH/FGW3000-HK <=Ver. 1.0.17.000000 Service parameter injection |
|---|
| Descrizione | Linksys routers FGW3000-AH and FGW3000-HK are found to have a serious command execution vulnerability. An attacker can issue an unauthorized request via HTTP POST and execute commands by sending a special POST request via control_panel_sw.asp. |
|---|
| Fonte | ⚠️ https://github.com/CH13hh/tmp_store_cc/blob/main/FGW3000/2.md |
|---|
| Utente | CH13hh (UID 83683) |
|---|
| Sottomissione | 26/04/2025 16:38 (1 Anno fa) |
|---|
| Moderazione | 20/05/2025 15:01 (24 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 309651 [Linksys FGW3000-AH/FGW3000-HK fino a 1.0.17.000000 HTTP POST Request /cgi-bin/sysconf.cgi control_panel_sw filename escalationi di privilegi] |
|---|
| Punti | 17 |
|---|