CVE-2019-11535
Critical
Description
Unsanitized user input in the web interface for Linksys WiFi extender products (RE6400 and RE6300 through 1.2.04.022) allows for remote command execution. An attacker can access system OS configurations and commands that are not intended for use beyond the web UI.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLinksys Re6400 Firmware
PublishedJul 17, 2019
First seenJul 17, 2019
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| linksys re6400_firmware | v ≤ 1.2.04.022 | — |
| linksys re6300_firmware | v ≤ 1.2.04.022 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.