high8.8Public exploit code
CVE-2022-38841
Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Linksys AX3200 V1.1.00 - Command Injection2023-03-22 · webapps · hardware
Impact
Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linksys | E8450 Firmware | Version 1.1.00 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171433/Linksys-AX3200-1.1.00-Command-Injection.html
- https://drive.google.com/drive/folders/1rAa4zzJPwMop0AEMiI2NKqUaZno7Ccqb?usp=sharing
- http://packetstormsecurity.com/files/171433/Linksys-AX3200-1.1.00-Command-Injection.html
- https://drive.google.com/drive/folders/1rAa4zzJPwMop0AEMiI2NKqUaZno7Ccqb?usp=sharing