CVE-2024-33788: Command Injection
Published May 6, 2024
·Updated
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint.
Affected Software
3 affected components
LinkSys E5600
All of the following
LinkSys E5600 Firmware=1.1.0.26
LinkSys E5600
Event History
May 6, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·01:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-33788?
CVE-2024-33788 is classified as a high severity command injection vulnerability.
2
How do I fix CVE-2024-33788?
To fix CVE-2024-33788, update to the latest version of the Linksys E5600 firmware that addresses this vulnerability.
3
What systems are affected by CVE-2024-33788?
CVE-2024-33788 affects Linksys E5600 routers running version v1.1.0.26.
4
What type of vulnerability is CVE-2024-33788?
CVE-2024-33788 is a command injection vulnerability found in the PinCode parameter of the API info form.
5
Is my Linksys E5600 router at risk due to CVE-2024-33788?
Yes, if your Linksys E5600 is running the vulnerable version v1.1.0.26, it is at risk due to CVE-2024-33788.