Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-10062.
PoCs published by m-1-k-3, including Metasploit module auxiliary/scanner/http/linksys_e1500_traversal.
AI-analyzed exploit summary This exploit demonstrates an OS command injection vulnerability in Linksys E1500/E2500 routers via the `ping_size` parameter in `apply.cgi`, allowing arbitrary command execution. It also includes examples of directory traversal, CSRF, XSS, and password change vulnerabilities.
Description
A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.
Exploits (2)
This exploit demonstrates an OS command injection vulnerability in Linksys E1500/E2500 routers via the `ping_size` parameter in `apply.cgi`, allowing arbitrary command execution. It also includes examples of directory traversal, CSRF, XSS, and password change vulnerabilities.
This Metasploit module exploits a directory traversal vulnerability in Linksys E1500 routers by sending crafted POST requests to 'apply.cgi' with traversal sequences. It attempts to read sensitive files from the filesystem after authenticating with provided credentials.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N