Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2025-60570 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T16:14:29.525Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formLogDnsquery. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/26-buffer%20overflow-formLogDnsquery.md
CVE ID: CVE-2025-60571 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T16:22:12.071Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR600LAx FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formSetQoS. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/24-buffer%20overflow-formSetQoS.md
CVE ID: CVE-2025-60572 State: PUBLISHED Published: 2025-10-24T00:00:00.000Z Last Updated: 2025-10-24T16:20:39.337Z Vendors: n/a Products: n/a Problem Types: n/a Description: D-Link DIR600L Ax FW116WWb01 was discovered to contain a buffer overflow via the curTime parameter in the function formAdvNetwork. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/luckysmallbird/DLINK-DIR600LAx-Vulnerability/blob/main/22-buffer%20overflow-formAdvNetwork.md
CVE ID: CVE-2025-60574 State: PUBLISHED Published: 2025-11-07T00:00:00.000Z Last Updated: 2025-11-10T15:04:25.257Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly sanitize user-supplied input. An attacker can exploit this by sending a crafted GET request to retrieve arbitrary files from the underlying system. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/jacopoaugelli/CVE-2025-60574
CVE ID: CVE-2025-60595 State: PUBLISHED Published: 2025-10-29T00:00:00.000Z Last Updated: 2025-10-30T20:29:49.865Z Vendors: n/a Products: n/a Problem Types: n/a Description: SPH Engineering UgCS 5.13.0 is vulnerable to Arbitary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://www.sphengineering.com - https://github.com/Clicksafeae/CVE-2025-60595/tree/main
CVE ID: CVE-2025-60632 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T19:15:12.564Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc - https://github.com/free5gc/free5gc/issues/705
CVE ID: CVE-2025-60633 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T19:14:53.785Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via the Nudm_SubscriberDataManagement API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc - https://github.com/free5gc/free5gc/issues/702 - https://github.com/free5gc/free5gc/issues/700 - https://github.com/free5gc/free5gc/issues/701 - https://github.com/free5gc/free5gc/issues/703
CVE ID: CVE-2025-60638 State: PUBLISHED Published: 2025-11-24T00:00:00.000Z Last Updated: 2025-11-24T19:09:05.387Z Vendors: n/a Products: n/a Problem Types: n/a Description: An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvailability API. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/free5gc/free5gc - https://github.com/free5gc/free5gc/issues/704
CVE ID: CVE-2025-60639 State: PUBLISHED Published: 2025-10-16T00:00:00.000Z Last Updated: 2025-10-16T19:41:15.247Z Vendors: n/a Products: n/a Problem Types: n/a Description: Hardcoded credentials in gsigel14 ATLAS-EPIC commit f29312c (2025-05-26). Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://atlas-epic.com - https://github.com/gsiegel14/ATLAS-EPIC - https://github.com/gsiegel14/ATLAS-EPIC/commit/f29312cf782ec5a6537fceaeb6a9ced7d7d04e1f - https://xancatos.org/cve202560639
CVE ID: CVE-2025-60641 State: PUBLISHED Published: 2025-10-16T00:00:00.000Z Last Updated: 2025-10-16T19:42:22.484Z Vendors: n/a Products: n/a Problem Types: n/a Description: The file mexcel.php in the Vfront 0.99.52 codebase contains a vulnerable call to unserialize(base64_decode($_POST['mexcel'])), where $_POST['mexcel'] is user-controlled input. This input is decoded from base64 and deserialized without validation or use of the allowed_classes option, allowing an attacker to inject arbitrary PHP objects. This can lead to malicious behavior, such as Remote Code Execution (RCE), SQL Injection, Path Traversal, or Denial of Service, depending on the availability of exploitable classes in the V
RCE), SQL Injection, Path Traversal, or Denial of Service, depending on the availability of exploitable classes in the Vfront codebase or its dependencies. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://vfront.com - https://xancatos.org/cve202560641
CVE ID: CVE-2025-60645 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-13T16:06:04.462Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Cross-Site Request Forgery (CSRF) in xxl-api v1.3.0 allows attackers to arbitrarily add users to the management module via a crafted GET request. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-api/issues/64 - https://gist.github.com/LockeTom/77fb982a49dee956101810bbefa09fb4
CVE ID: CVE-2025-60646 State: PUBLISHED Published: 2025-11-12T00:00:00.000Z Last Updated: 2025-11-12T21:33:01.596Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stored cross-site scripting (XSS) in the Business Line Management module of Xxl-api v1.3.0 attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the Name parameter. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://github.com/xuxueli/xxl-api/issues/65 - https://gist.github.com/LockeTom/0a02c0b2e2011abfbdf4e5fdbcc9b371
CVE ID: CVE-2025-60660 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:32:44.922Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the mac parameter in the fromAdvSetMacMtuWan function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1YTKUiYXMsaAEoasx7xbQxy2tsrC5E3Ew/view?usp=sharing
CVE ID: CVE-2025-60661 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:38:42.791Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the cloneType parameter in the fromAdvSetMacMtuWan function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/10bqMY1XighOBZ5D_Q8GtWFwhmxSN2GJw/view?usp=sharing
CVE ID: CVE-2025-60662 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:35:24.445Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanSpeed parameter in the fromAdvSetMacMtuWan function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1-XpZmT_Yw5JtygQJ6HZBRnC5IjlAnLQO/view?usp=sharing
CVE ID: CVE-2025-60663 State: PUBLISHED Published: 2025-10-02T00:00:00.000Z Last Updated: 2025-10-02T19:41:44.152Z Vendors: n/a Products: n/a Problem Types: n/a Description: Tenda AC18 V15.03.05.19 was discovered to contain a stack overflow via the wanMTU parameter in the fromAdvSetMacMtuWan function. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://drive.google.com/file/d/1co536tsEdPANFHsvhBvay0_FOMCA4R6r/view?usp=sharing
CVE ID: CVE-2025-60671 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T18:08:51.160Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /var/system/linux_vlan_reinit file. The vulnerability occurs because content read from this file is only partially validated for a prefix and then formatted using vsnprintf() before being executed with system(), allowing an attacker with write access to /var/system/linux_vlan_reinit to execute arbitrary commands on the device. Additional Analyst Notes: -
h write access to /var/system/linux_vlan_reinit to execute arbitrary commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-823G/CVE-2025-60671.md
CVE ID: CVE-2025-60672 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T16:18:23.628Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDynamicDNSSettings' functionality, where the 'ServerAddress' and 'Hostname' parameters in prog.cgi are stored in NVRAM and later used by rc to construct system commands executed via twsystem(). An attacker can exploit this vulnerability remotely without authentication by sending a specially crafted HTTP request, leading to arbitrary command execution on the device. Additional
entication by sending a specially crafted HTTP request, leading to arbitrary command execution on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60672.md
CVE ID: CVE-2025-60673 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T16:23:00.412Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetDMZSettings' functionality, where the 'IPAddress' parameter in prog.cgi is stored in NVRAM and later used by librcm.so to construct iptables commands executed via twsystem(). An attacker can exploit this vulnerability remotely without authentication by sending a specially crafted HTTP request, leading to arbitrary command execution on the device. Additional Analyst Notes: - C
ng a specially crafted HTTP request, leading to arbitrary command execution on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60673.md
CVE ID: CVE-2025-60674 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T17:35:59.895Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin in the rc binary's USB storage handling module. The vulnerability occurs when the "Serial Number" field from a USB device is read via sscanf into a 64-byte stack buffer, while fgets reads up to 127 bytes, causing a stack overflow. An attacker with physical access or control over a USB device can exploit this vulnerability to potentially execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment:
s vulnerability to potentially execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60674.md
CVE ID: CVE-2025-60675 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T18:18:29.342Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in the D-Link DIR-823G router firmware DIR823G_V1.0.2B05_20181207.bin in the timelycheck and sysconf binaries, which process the /tmp/new_qos.rule configuration file. The vulnerability occurs because parsed fields from the configuration file are concatenated into command strings and executed via system() without any sanitization. An attacker with write access to /tmp/new_qos.rule can execute arbitrary commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: Refer
/tmp/new_qos.rule can execute arbitrary commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-823G/CVE-2025-60675.md
CVE ID: CVE-2025-60676 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T16:27:52.204Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated command injection vulnerability exists in the D-Link DIR-878A1 router firmware FW101B04.bin. The vulnerability occurs in the 'SetNetworkSettings' functionality of prog.cgi, where the 'IPAddress' and 'SubnetMask' parameters are directly concatenated into shell commands executed via system(). An attacker can exploit this vulnerability remotely without authentication by sending a specially crafted HTTP request, leading to arbitrary command execution on the device. Additional Analyst Notes: - CISA ADP Vuln
ly crafted HTTP request, leading to arbitrary command execution on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-878/CVE-2025-60676.md
CVE ID: CVE-2025-60679 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-14T18:06:27.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow vulnerability exists in the D-Link DIR-816A2 router firmware DIR-816A2_FWv1.10CNB05_R1B011D88210.img in the upload.cgi module, which handles firmware version information. The vulnerability occurs because /proc/version is read into a 512-byte buffer and then concatenated using sprintf() into another 512-byte buffer containing a 29-byte constant. Input exceeding 481 bytes triggers a stack buffer overflow, allowing an attacker who can control /proc/version content to potentially execute arbitrary cod
a stack buffer overflow, allowing an attacker who can control /proc/version content to potentially execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://d-link.com - https://www.dlink.com/en/security-bulletin/ - https://www.dlink.com/en - https://github.com/yifan20020708/SGTaint-0-day/blob/main/DLink/DLink-DIR-816/CVE-2025-60679.md
CVE ID: CVE-2025-60682 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:24:34.743Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the cloudupdate_check binary, specifically in the sub_402414 function that handles cloud update parameters. User-supplied 'magicid' and 'url' values are directly concatenated into shell commands and executed via system() without any sanitization or escaping. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichme
exploit this vulnerability to execute arbitrary commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60682.md
CVE ID: CVE-2025-60683 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:25:55.938Z Vendors: n/a Products: n/a Problem Types: n/a Description: A command injection vulnerability exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary, specifically in the sub_40BFA4 function that handles network interface reinitialization from '/var/system/linux_vlan_reinit'. Input is only partially validated by checking the prefix of interface names, and is concatenated into shell commands executed via system() without escaping. An attacker with write access to this file can execute arbitrary commands on the device. Additional Analyst Notes:
ping. An attacker with write access to this file can execute arbitrary commands on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60683.md
CVE ID: CVE-2025-60684 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:34:03.242Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (sub_42F32C function). The web interface reads the "lang" parameter and constructs Help URL strings using sprintf() into fixed-size stack buffers without proper length validation. Maliciously crafted input can overflow these buffers, potentially leading to arbitrary code execution or memory corruption, without requiring authentication. Additional
fers, potentially leading to arbitrary code execution or memory corruption, without requiring authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60684.md
CVE ID: CVE-2025-60685 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:27:56.985Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow exists in the ToToLink A720R Router firmware V4.1.5cu.614_B20230630 within the sysconf binary (sub_401EE0 function). The binary reads the /proc/stat file using fgets() into a local buffer and subsequently parses the line using sscanf() into a single-byte variable with the %s format specifier. Maliciously crafted /proc/stat content can overwrite adjacent stack memory, potentially allowing an attacker with filesystem write privileges to execute arbitrary code on the device. Additional Analyst Notes:
allowing an attacker with filesystem write privileges to execute arbitrary code on the device. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60685.md
CVE ID: CVE-2025-60686 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:37:44.079Z Vendors: n/a Products: n/a Problem Types: n/a Description: A local stack-based buffer overflow vulnerability exists in the infostat.cgi and cstecgi.cgi binaries of ToToLink routers (A720R V4.1.5cu.614_B20230630, LR1200GB V9.1.0u.6619_B20230130, and NR1800X V9.1.0u.6681_B20230703). Both programs parse the contents of /proc/net/arp using sscanf() with "%s" format specifiers into fixed-size stack buffers without length validation. Specifically, one function writes user-controlled data into a single-byte buffer, and the other into adjacent small arrays without bounds checking. An at
user-controlled data into a single-byte buffer, and the other into adjacent small arrays without bounds checking. An attacker who controls the contents of /proc/net/arp can trigger memory corruption, leading to denial of service or potential arbitrary code execution. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-A720R/CVE-2025-60686.md
CVE ID: CVE-2025-60687 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:35:24.532Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated command injection vulnerability exists in the ToToLink LR1200GB Router firmware V9.1.0u.6619_B20230130 within the cstecgi.cgi binary (sub_41EC68 function). The binary reads the "imei" parameter from a web request and verifies only that it is 15 characters long. The parameter is then directly inserted into a system command using sprintf() and executed with system(). Maliciously crafted IMEI input can execute arbitrary commands on the router without authentication. Additional Analyst Notes: - CISA ADP Vu
IMEI input can execute arbitrary commands on the router without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60687.md
CVE ID: CVE-2025-60688 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:36:37.203Z Vendors: n/a Products: n/a Problem Types: n/a Description: A stack buffer overflow vulnerability exists in the ToToLink LR1200GB (V9.1.0u.6619_B20230130) and NR1800X (V9.1.0u.6681_B20230703) Router firmware within the cstecgi.cgi binary (setDefResponse function). The binary reads the "IpAddress" parameter from a web request and copies it into a fixed-size stack buffer using strcpy() without any length validation. Maliciously crafted input can overflow the buffer, leading to potential arbitrary code execution or memory corruption, without requiring authentication. Additional Anal
r, leading to potential arbitrary code execution or memory corruption, without requiring authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://totolink.com - https://www.totolink.net/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/ToToLink/ToToLink-LR1200GB/CVE-2025-60688.md
CVE ID: CVE-2025-60689 State: PUBLISHED Published: 2025-11-13T00:00:00.000Z Last Updated: 2025-11-13T17:58:06.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: An unauthenticated command injection vulnerability exists in the Start_EPI function of the httpd binary on Linksys E1200 v2 routers (Firmware E1200_v2.0.11.001_us.tar.gz). The vulnerability occurs because user-supplied CGI parameters (wl_ant, wl_ssid, wl_rate, ttcp_num, ttcp_ip, ttcp_size) are concatenated into system command strings without proper sanitization and executed via wl_exec_cmd. Successful exploitation allows remote attackers to execute arbitrary commands on the device without authentication. Additional Analy
xploitation allows remote attackers to execute arbitrary commands on the device without authentication. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - http://linksys.com - https://www.linksys.com/ - https://github.com/yifan20020708/SGTaint-0-day/blob/main/Linksys/Linksys-E1200/CVE-2025-60689.md