CVE-2013-20007: Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

Q: Who can exploit this issue?

An attacker must be authenticated to the device. The vulnerable interface is reachable over the network, and exploitation does not require user interaction once the attacker has valid credentials.

Q: Which devices are affected?

Linksys WAG200G devices running firmware through version 1.01.06 are affected.

Q: What access can an attacker gain after exploitation?

The attacker can inject operating-system commands through the timer_interval parameter in a POST request to setup.cgi. The described impact includes starting telnetd or downloading and executing a backdoor, resulting in full device control.

Published Oct 28, 2026

Updated

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timerinterval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and run a backdoor, gaining full device control.

Affected Software

1 affected component

LinkSys WAG200G<=1.01.06

Event History

Oct 28, 2026

CVE Published

via MITRE·02:03 AM

Data Sourced

via MITRE·02:03 AM

DescriptionSeverityWeakness

Frequently Asked Questions

Who can exploit this issue?

An attacker must be authenticated to the device. The vulnerable interface is reachable over the network, and exploitation does not require user interaction once the attacker has valid credentials.

Which devices are affected?

Linksys WAG200G devices running firmware through version 1.01.06 are affected.

What access can an attacker gain after exploitation?

The attacker can inject operating-system commands through the timer_interval parameter in a POST request to setup.cgi. The described impact includes starting telnetd or downloading and executing a backdoor, resulting in full device control.

CVE-2013-20007: Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

Which devices are affected?

What access can an attacker gain after exploitation?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

Which devices are affected?

What access can an attacker gain after exploitation?