Submeter #626694: Linksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 OS Command Injectioninformação

TítuloLinksys RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 RE6500、RE6250、RE6300、RE6350、RE7000、RE9000 OS Command Injection
DescriçãoWe found an command Injection vulnerability in Linksys router with firmware which was released recently, allows remote attackers to execute arbitrary OS commands from a crafted request.In um_red, hname is directly passed by the attacker, so we can control the hname to attack the OS.
Fonte⚠️ https://github.com/wudipjq/my_vuln/blob/main/Linksys1/vuln_45/45.md
Utilizador
 pjq123 (UID 86618)
Submissão01/08/2025 04h37 (há 9 meses)
Moderação10/08/2025 10h06 (9 days later)
EstadoAceite
Entrada VulDB319363 [Linksys RE6250/RE6300/RE6350/RE6500/RE7000/RE9000 até 20250801 /goform/RP_setBasicAuto um_red hname Elevação de Privilégios]
Pontos18

Do you know our Splunk app?

Download it now for free!