PT-2026-66854 · Wr1200+8 · Wr1200+8
CVE-2026-38708
·
Published
2026-07-31
·
Updated
2026-08-03
CVSS v3.1
9.8
Critical
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
TR1200 version 2.4.15
TR3000 version 2.4.21
WR300 version 2.4.25
WR1200 version 2.4.23
WR1300 version 2.4.22
WR1500 version 2.3.10
WR3000 version 2.4.19
WR3600 version 2.3.16
WR6500 version 2.3.15
Description
A command injection issue exists in the
system.setclock interface. This allows an attacker to execute arbitrary commands with root privileges by providing a specially crafted input. Command injection is a flaw that allows an attacker to execute operating system commands on the host machine.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Command Injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Tr1200
Tr3000
Wr1200
Wr1300
Wr1500
Wr300
Wr3000
Wdr3600
Wr6500