Command Injection Vulnerability in Linksys E5600 Router
CVE-2025-29223

6.3MEDIUM

Key Information:

Vendor
Linksys
Status
E5600 Router
Vendor
CVE Published:
21 March 2025

Summary

The Linksys E5600 v1.1.0.26 contains a vulnerability allowing command injection via the 'pt' parameter in the traceRoute function. This weakness could enable an attacker to execute arbitrary commands on the router, potentially compromising network security. Users should update firmware to protect against exploitation.

References

https://github.com/JZP018/Vuln/blob/main/linsys/E5600/CI_...

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.