CVE-2025-29226

In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["count"] parameter.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:linksys:e5600_firmware:1.1.0.26:*:*:*:*:*:*:*
cpe:2.3:h:linksys:e5600:-:*:*:*:*:*:*:*

History

01 Apr 2025, 20:29

Type Values Removed Values Added
First Time Linksys
Linksys e5600 Firmware
Linksys e5600
CPE cpe:2.3:o:linksys:e5600_firmware:1.1.0.26:*:*:*:*:*:*:*
cpe:2.3:h:linksys:e5600:-:*:*:*:*:*:*:*
References () https://github.com/JZP018/Vuln/blob/main/linsys/E5600/CI_pingTest_count/CI_pingTest_count.md - () https://github.com/JZP018/Vuln/blob/main/linsys/E5600/CI_pingTest_count/CI_pingTest_count.md - Broken Link

21 Mar 2025, 17:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-03-21 17:15

Updated : 2025-04-01 20:29


NVD link : CVE-2025-29226

Mitre link : CVE-2025-29226


JSON object : View

Products Affected

linksys

  • e5600
  • e5600_firmware
CWE

No CWE.