Unauthenticated Command Injection Vulnerability in Linksys E1200 Router
CVE-2025-60689
5.4MEDIUM
What is CVE-2025-60689?
An unauthenticated command injection flaw has been identified in the Start_EPI function of the httpd binary present in Linksys E1200 v2 routers. This vulnerability is triggered when user-supplied CGI parameters are inadequately sanitized before being executed, allowing malicious actors to execute arbitrary commands remotely without the need for authentication. This presents a serious risk to the integrity and functionality of the router and the network it manages.