CVE-2024-22544: Command Injection

Published Feb 27, 2024

Updated

An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbitrary code via the setDateTime function.

Affected Software

3 affected components

All of the following

LinkSys E1700 Firmware=1.0.04

LinkSys E1700

LinkSys Router E1700

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Linksys Router E1700 to a version that resolves this vulnerability.
Fixed in 1.0.04 (build 3)

Event History

Feb 27, 2024

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·01:15 AM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-22544?

CVE-2024-22544 is considered a medium severity vulnerability due to its potential for arbitrary code execution.

How do I fix CVE-2024-22544?

To fix CVE-2024-22544, update your Linksys Router E1700 to the latest firmware version released by Linksys.

Who is affected by CVE-2024-22544?

CVE-2024-22544 affects users of Linksys Router E1700 running version 1.0.04 (build 3).

What can an attacker do with CVE-2024-22544?

An attacker exploiting CVE-2024-22544 can execute arbitrary code on the affected Linksys Router E1700.

Is CVE-2024-22544 a local or remote vulnerability?

CVE-2024-22544 is a remote vulnerability that requires authentication to exploit.