TI-2013-02880 Aliases CVE-2013-3307 GHSA-wg68-f4gp-9q35

OS command injection in Linksys E1000

HIGH 77CWE-78Published 2025-07-11 · Updated 2025-07-11

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: Low · Low · Low
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-78.

Summary

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV

EPSS 0.63108 99th percentileScored 2026-11-07

Fix Fixed E1200 (Linksys): 2.0.05

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation: Poc
Automatable: Yes
Technical impact: Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Linksys	E1000	up to 2.1.02	—	No fix listed	CNA
Linksys	E1200	before 2.0.05	2.0.05	Patch available	CNA
Linksys	E3200	up to 1.0.04	—	No fix listed	CNA

E1000 VendorLinksys Affected up to 2.1.02 Fixed in — No fix listed CNA
E1200 VendorLinksys Affected before 2.0.05 Fixed in 2.0.05 Patch available CNA
E3200 VendorLinksys Affected up to 1.0.04 Fixed in — No fix listed CNA

Remediation

Fix · CNA E1200 (Linksys) Fixed in 2.0.05

Timeline

2026-10-02 Threatist record created from CVE-2013-3307
2026-10-03 Alias added: GHSA-wg68-f4gp-9q35
2026-10-12 EPSS moved to the 99th percentile and above

References

Other 1

https://web.archive.org/web/20140421001918/https://www.trustwave.com/spiderlabs/advisories/TWSL2013-008.txt

TI-2025-24206 Linksys Routers E/WAG/WAP/WES/WET/WRT-Series CVSS 4.0CRITICAL 10.0
TI-2017-12715 OS command injection in Linksys WVBR0 CVSS 3.0CRITICAL 9.8
TI-2026-70977 Stack-based buffer overflow in Linksys E1700 Mac Filter CVSS 4.0CRITICAL 10.0
TI-2026-22199 Missing neutralization in Linksys MR9600, Linksys MX4200 CVSS 3.1CRITICAL 9.8
TI-2026-22198 Missing neutralization in Linksys MR9600, Linksys MX4200 CVSS 3.1CRITICAL 9.8
TI-2026-22197 Missing authentication in Linksys MR9600, Linksys MX4200 CVSS 3.1CRITICAL 9.8

See all 253 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences