CVE-2025-45487

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function

Medium · published May 6, 2025

CVSS v3.1
6.5
EPSS
12%
Percentile
96.0
In the wild
Unconfirmed
What it is

⚠️ A sneaky command injection vulnerability hides in the Linksys E5600! This flaw lets attackers execute commands through the InternetConnection function — a bit like a hotel receptionist mistakenly letting unauthorized guests into the VIP lounge. 🔑 Think of your router as a restaurant kitchen. If the order slip (the InternetConnection function) isn’t properly checked, the cook (the router) might whip up a dangerous dish that wasn't on the menu! An attacker could exploit this vulnerability to execute arbitrary commands on the router, potentially compromising your network. This could lead to unauthorized access or manipulation of sensitive settings, which is definitely not the kind of surprise you want while browsing online!

Put simply

Think of your router as a restaurant kitchen. If the order slip (the InternetConnection function) isn’t properly checked, the cook (the router) might whip up a dangerous dish that wasn't on the menu! The command injection vulnerability in Linksys E5600 v1.1.0.26 occurs when untrusted input is improperly handled in the InternetConnection function, allowing attackers to inject and execute commands on the device.

What to do

An attacker could exploit this vulnerability to execute arbitrary commands on the router, potentially compromising your network. This could lead to unauthorized access or manipulation of sensitive settings, which is definitely not the kind of surprise you want while browsing online! To protect your network, update your Linksys E5600 router to the latest firmware version available. Regularly check for updates and consider implementing firewall rules to restrict unwanted traffic. 🛡️ You've got this! Follow these steps, and you'll be back in control of your router in no time! 💪✨

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.11561 · 96.0th percentile
Published
2025-05-06T00:00Z
EPSS history
Timeline
  • 06 MAY 00:00Z
    Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.InternetConnection function
    cvelistv5