PT-2024-33071 · Linksys · Linksys E3000

CVE-2024-48286

Published

2024-08-27

Updated

2024-11-21

CVSS v2.0

9.0

High

Vector

AV:N/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Linksys E3000 version 1.0.06.002 US

Description The issue is related to command injection via the diag ping start function.

Recommendations For Linksys E3000 version 1.0.06.002 US, consider disabling the diag ping start function until a patch is available.

Exploit

Fix

Command Injection

Found an issue in the description? Have something to add? Feel free to write us 👾

BDU:2025-11340

CVE-2024-48286

Linksys E3000