Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are suscep…

Published 8 y ago 2018-10-17 · modified 4 mo ago 2026-06-17 · JSON

CVSS

7.2

v3.0 · CNA

CISA KEV

not known exploited

EPSS

3.4%

percentile 89%

Public exploits

none known

Devices in the Linksys ESeries line of routers (Linksys E1200 Firmware Version 2.0.09 and Linksys E2500 Firmware Version 3.0.04) are susceptible to OS command injection vulnerabilities due to improper filtering of data passed to and retrieved from NVRAMData entered into the 'Router Name' input field through the web portal is submitted to apply.cgi as the value to the 'machine_name' POST parameter. When the 'preinit' binary receives the SIGHUP signal it enters a code path that calls a function named 'set_host_domain_name' from its libshared.so shared object.

Exploit prediction (EPSS)

3.38% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.

CVSS scores

Assigned by	Version	Score	Vector
CNA	3.0	7.2	`CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
NVD	3.1	7.2	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
CNA	3.0	7.2	`CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H`
NVD	2.0	9.0	`AV:N/AC:L/Au:S/C:C/I:C/A:C`

Affected products

Linksys ESeries E1200
Linksys ESeries E2500

Classification

Weakness

CWE-78 Improper Neutralization of Special Elements used in an OS Command

References

talosintelligence.com /vulnerability_reports/TALOS-2018-0625 · x_refsource_MISC, x_transferred

Sources

CVE List: CVE-2018-3954
NVD: CVE-2018-3954

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.