CVE-2022-38841

HIGH

Linksys AX3200 1.1.00 - Command Injection

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2022-38841. PoCs published by Ahmed Alroky.

AI-analyzed exploit summary This exploit demonstrates a command injection vulnerability in Linksys AX3200 V1.1.00 via the diagnostics page's traceroute functionality. Commands appended with a pipe character are executed as root.

Description

Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page.

Exploits (1)

exploitdb WORKING POC
by Ahmed Alroky · textwebappshardware
https://www.exploit-db.com/exploits/51035

This exploit demonstrates a command injection vulnerability in Linksys AX3200 V1.1.00 via the diagnostics page's traceroute functionality. Commands appended with a pipe character are executed as root.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Linksys AX3200 V1.1.00
Auth required
Prerequisites: Access to the web interface · Valid credentials
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (2)

Core 2

Scores

CVSS v3 8.8
EPSS 0.1067
EPSS Percentile 95.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (1)
linksys/e8450_firmware 1.1.00
Published Apr 16, 2023
Tracked Since Feb 18, 2026