CVE-2024-33788

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint

High · published May 6, 2024

CVSS v3.1
8.0
EPSS
2%
Percentile
80.1
In the wild
Unconfirmed
What it is

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint.

The record
Technical detail
CVSS v3.1
8.0 · HIGH
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01948 · 80.1th percentile
Published
2024-05-06T00:00Z
EPSS history
Timeline
  • 06 MAY 00:00Z
    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint
    cvelistv5