CVE-2025-29227

Medium CVSS: 6.3

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["pkgsize"] parameter.

Vendor

Linksys

Product

E5600 Firmware

CWE

CWE-77

Yayın Tarihi

2025-03-21 17:15:39

Güncelleme

2025-04-01 20:28:58

Source Identifier

cve@mitre.org

KEV Date Added

Kategoriler

CWE-77 E5600 Firmware MEDIUM Linksys 2025

Referanslar

https://github.com/JZP018/Vuln/blob/main/linsys/E5600/CI_pingTest_pkgsize/CI_pingTest_pkgsize.md

Benzer Kayıtlar

Medium

CVE-2026-25603

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys…

Critical

CVE-2025-29228

Linksys E5600 V1.1.0.26 is vulnerable to command injection in the runtime.macClone function via the mc.ip parameter.

Critical

CVE-2025-29229

linksys E5600 V1.1.0.26 is vulnerable to command injection in the function ddnsStatus.

High

CVE-2025-52692

Successful exploitation of the vulnerability could allow an attacker with local network access to send a specially craft…

Medium

CVE-2025-29231

A stored cross-site scripting (XSS) vulnerability in the page_save component of Linksys E5600 V1.1.0.26 allows attackers…

High

CVE-2025-14136

A security flaw has been discovered in Linksys RE6500, RE6250, RE6300, RE6350, RE7000 and RE9000 1.0.013.001/1.0.04.001/…