CVE-2019-11535

Name of the Vulnerable Software and Affected Versions Linksys WiFi extender products (RE6400 and RE6300) versions 1.2.04.022 and earlier

Description The issue concerns unsanitized user input in the web interface, allowing for remote command execution. This enables an attacker to access system OS configurations and commands not intended for use beyond the web UI.

Recommendations For Linksys WiFi extender products (RE6400 and RE6300) versions 1.2.04.022 and earlier, consider disabling remote access to the web interface until a fix is available. Restrict access to system OS configurations and commands to minimize the risk of exploitation.