Intrusion PreventionLinksys.E2000.WRT54GL.WL.TTCP.Command.Injection
Description
This indicates an attack attempt to exploit a Command Injection vulnerability in Linksys E2000 and WRT54GL routers.
The vulnerability is due to insufficient sanitizing of user-supplied inputs in the application. A remote, unauthenticated attacker may be able to exploit this to execute arbitrary commands within the context of the system.
Affected Products
Linksys E2000 version 1.0.06
Linksys WRT54GL version 4.30.18.006
Impact
System Compromise: Remote attackers can execute arbitrary code on vulnerable systems.
Recommended Actions
Currently, we are not aware of any vendor-supplied patch for this issue.
Telemetry
Coverage
| IPS (Regular DB) | |
| IPS (Extended DB) |
| ID | 54755 |
| Created | Mar 07, 2024 |
| Updated | Apr 08, 2024 |
| Risk |
|
| CVE ID | CVE-2023-31742 CVE-2023-31741 CVE-2022-43970 |
| Exploit Prediction Score | 0.61% |
| Default Action | pass |
| Active | |
| Affected OS | Other |
| Affected App | Other |