CVE-2013-3307: high-severity vulnerability in Linksys E1000
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
75Vexday Risk Score
Prioritize patching. It exploitation observed by VulnCheck and has a public proof of concept.
ssvc Actcvss 8.3epss 63%
from disclosure to weaponsame day
Published on NVDJul 11
1st PoCJun 24
VulnCheckNov 11
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/26415unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Linksys E1000
In the same product, most dangerous first.