CVE-2025-4999mediumCWE-74CWE-77

CVE-2025-4999: medium-severity vulnerability in Linksys FGW3000-AH

Linksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi sub_4153FC command injection

Published · Updated

Follow this CVE+ Monitor FGW3000-AH+ Monitor FGW3000-HK

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.3epss 6.9%
A vulnerability was found in Linksys FGW3000-AH and FGW3000-HK up to 1.0.17.000000 and classified as critical. Affected by this issue is the function sub_4153FC of the file /cgi-bin/sysconf.cgi of the component HTTP POST Request Handler. The manipulation of the argument supplicant_rnd_id_en leads to command injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
Affected products
Linksys · FGW3000-AHLinksys · FGW3000-HK
Related CVEs — Linksys FGW3000-AH

In the same product, most dangerous first.

CVE-2025-5000MEDIUMLinksys FGW3000-AH/FGW3000-HK HTTP POST Request sysconf.cgi control_panel_sw command injectionEPSS 6.9%