Arbitrary Code Execution Vulnerability in Linksys Router E1700
CVE-2024-22544

8HIGH

Key Information:

Vendor

Linksys
Status
E1700 Firmware
Vendor
CVE Published:
27 February 2024

What is CVE-2024-22544?

A vulnerability has been identified in the Linksys Router E1700, specifically in version 1.0.04 (build 3), which permits authenticated users to execute arbitrary code through the setDateTime function. This flaw may allow an attacker to potentially gain control of the affected device, leading to unauthorized system access and manipulation of data. Users are encouraged to apply security measures to protect their network from exploitation.

References

https://mat4mee.notion.site/Remote-Code-Execution-RCE-on-...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.