CVE-2013-3307

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

CVSS v3.1

8.3 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L

EPSS

52.65% chance of exploitation in the next 30 days, 99th percentile

Published

2025-07-11

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/26415

References

• CVE Record
• NVD entry

Related

• CVE-2013-3304
• CVE-2013-3311
• CVE-2013-3301
• CVE-2013-3312
• CVE-2013-3299
• CVE-2013-3313