Linksys E1500 vulnerabilities

2 vulnerabilities

Known vulnerabilities in Linksys E1500, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

6.9MediumCVE-2013-10062linksys · e1500_firmwareLinksys Routers apply.cgi Path TraversalA directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.EPSS2.07%8.8HighCVE-2024-42633linksys · e1500_firmwarelinksys e1500_firmwareA Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges.EPSS2.08%