CVE-2025-45489: Command Injection
Published May 6, 2025
·Updated
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter.
Affected Software
3 affected components
LinkSys E5600
All of the following
LinkSys E5600 Firmware=1.1.0.26
LinkSys E5600
Event History
May 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-45489?
CVE-2025-45489 is identified as a high severity command injection vulnerability.
2
How do I fix CVE-2025-45489?
To fix CVE-2025-45489, update your Linksys E5600 to the latest firmware version that addresses this vulnerability.
3
What can attackers do with CVE-2025-45489?
Attackers can exploit CVE-2025-45489 to execute arbitrary commands on the device via the hostname parameter.
4
Is CVE-2025-45489 specific to certain firmware versions?
Yes, CVE-2025-45489 affects Linksys E5600 firmware version v1.1.0.26.
5
How can I determine if my Linksys E5600 is vulnerable to CVE-2025-45489?
You can determine if your Linksys E5600 is vulnerable by checking if it is running firmware version v1.1.0.26.