What’s Vulnerable › Vulnerabilities
CVE-2013-3307
- Severity: high (CVSS 8.3 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 63.1% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2025-07-11 · updated 2026-06-16
- Weakness: CWE-78
Description
Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
Affected products
- Linksys E1000: through 2.1.02
- Linksys E1200: before 2.0.05 — fixed in 2.0.05
- Linksys E3200: through 1.0.04
How to fix
Upgrade to a fixed version: Linksys E1200 2.0.05. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2013-3307 or the next vulnerability affects your stack