8.3
CVE-2013-3307
- EPSS 5.16%
- Published 11.07.2025 00:00:00
- Last modified 15.07.2025 13:14:49
- Source cve@mitre.org
- Teams watchlist Login
- Open Login
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
Verknüpft mit AI von unstrukturierten Daten zu bestehenden CPE der NVD
This information is available to logged-in users. Login
Daten sind bereitgestellt durch das CVE Programm von einer CVE Numbering Authority (CNA) (Unstrukturiert).
VendorLinksys
≫
Product
E1000
Default Statusunknown
Version <=
2.1.02
Version
0
Status
affected
VendorLinksys
≫
Product
E1200
Default Statusunaffected
Version <
2.0.05
Version
0
Status
affected
VendorLinksys
≫
Product
E3200
Default Statusunaffected
Version <=
1.0.04
Version
0
Status
affected
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
| Type | Source | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 5.16% | 0.895 |
| Source | Base Score | Exploit Score | Impact Score | Vector string |
|---|---|---|---|---|
| cve@mitre.org | 8.3 | 3.9 | 3.7 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
|
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.