CVE-2021-25310

The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands…

published February 2, 2021

CVSS
—
EPSS
5%
Percentile
91.7
In the wild
Unconfirmed
What it is

The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges via shell metacharacters in the ui_language POST parameter to the apply.cgi form endpoint. This occurs in do_upgrade_post in mini_httpd. NOTE: This vulnerability only affects products that are no longer supported by the maintaine

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04633 · 91.7th percentile
Published
2021-02-02T14:01Z
EPSS history
Timeline
  • 02 FEB 14:01Z
    The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands…
    cvelistv5