#Cisco linksys router registration#

This occurs in do_upgrade_post in mini_httpd. ** UNSUPPORTED WHEN ASSIGNED ** The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges via shell metacharacters in the ui_language POST parameter to the apply.cgi form endpoint. Linksys MR9600 devices before 2.0.5 allow attackers to read arbitrary files via a symbolic link to the root directory of a NAS SMB share. This issue affects: Linksys MR8300 Router 1.0. The username and password fields are not sanitized correctly and are used as URL construction arguments, allowing URL redirection to an arbitrary server, downloading an arbitrary script file, and eventually executing the file in the device. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands.

#Cisco linksys router registration#

Linksys E1200 v1.0.04 is vulnerable to Buffer Overflow via ej_get_web_page_name.Ĭommand injection vulnerability in Linksys MR8300 router while Registration to DDNS Service.