high8.8
CVE-2024-42633
A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001.
Impact
A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Linksys | E1500 Firmware | Version 1.0.06.001 |