Showing 2 vulnerabilities on this page for E3200

Signals CISA KEV Ransomware Nuclei
Linksys vulnerability results
VulnerabilityTitle and contextCVSSEPSSPoCsSignalsSTIX action

Linksys x3000 firmware ping_ip command injection

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

CWE-78Jul 11, 2025
CVSS8.3v3.1EPSS53.2%PoCs1SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm  in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the

CWE-20CWE-78Jun 24, 2025
CVSS10.0v4.0EPSS85.8%PoCs3SignalsNot listed in CISA KEVNo known ransomware useNo Nuclei templatesSTIX