CVE Feed

    Dashboard / CVE / CVE-2023-31740

    CVE-2023-31740

    There is a command injection vulnerability in the Linksys E2000 router with firmware version 1.0.06. If an attacker gains web management privileges, they can inject commands into the post request parameters WL_atten_bb, WL_atten_radio, and WL_atten_ctl in the apply.cgi interface, thereby gaining shell privileges.

    Published:May 23, 2023
    Last Modified:Jan 21, 2025
    EPS:May 23, 2023
    EPSS Score:0.00416
    CVSS Score:7.2

    Affected Products

    Vendor
    Linksys
    Product
    E2000
    Vendor
    Linksys
    Product
    E2000 Firmware

    Exploits

    https://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31740/Linksys_E2000_RCE.pdfhttps://github.com/D2y6p/CVE/blob/main/Linksys/CVE-2023-31740/Linksys_E2000_RCE.pdf

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High