ID
VAR-202411-1640
CVE
CVE-2024-48286
TITLE
Linksys E3000 diag_ping_start Command Injection Vulnerability
Trust: 0.6
sources:
CNVD: CNVD-2024-46385
DESCRIPTION
Linksys E3000 is a powerful dual-band Wireless-N router from Linksys, an American company. There is a security vulnerability in diag_ping_start of Linksys E3000. A remote attacker can use this vulnerability to submit special requests and execute arbitrary commands in the context of the application.
Trust: 0.6
sources:
CNVD: CNVD-2024-46385
IOT TAXONOMY
| category: | ['Network device'] | sub_category: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-46385
AFFECTED PRODUCTS
| vendor: | linksys | model: | e3000 1.0.06.002 us | scope: | - | version: | - | Trust: 0.6 |
sources:
CNVD: CNVD-2024-46385
CVSS
SEVERITY | CVSSV2 | CVSSV3 | ||||||||||||||||||||||||||||||||||||||||||
|
|
sources:
CNVD: CNVD-2024-46385
EXTERNAL IDS
| db: | NVD | id: | CVE-2024-48286 | Trust: 0.6 |
| db: | CNVD | id: | CNVD-2024-46385 | Trust: 0.6 |
sources:
CNVD: CNVD-2024-46385
REFERENCES
| url: | https://github.com/groundctl2majortom/pocs/blob/main/cisco_linksys_e3000_rce.md | Trust: 0.6 |
sources:
CNVD: CNVD-2024-46385
SOURCES
| db: | CNVD | id: | CNVD-2024-46385 |
LAST UPDATE DATE
2024-12-05T03:50:09.980000+00:00
SOURCES UPDATE DATE
| db: | CNVD | id: | CNVD-2024-46385 | date: | 2024-11-28T00:00:00 |
SOURCES RELEASE DATE
| db: | CNVD | id: | CNVD-2024-46385 | date: | 2024-11-27T00:00:00 |