CVE-2025-45490: Command Injection
Published May 6, 2025
·Updated
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the password parameter.
Affected Software
3 affected components
LinkSys E5600
All of the following
LinkSys E5600 Firmware=1.1.0.26
LinkSys E5600
Event History
May 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2025-45490?
CVE-2025-45490 is classified as a high-severity vulnerability due to its potential for command injection.
2
How do I fix CVE-2025-45490?
To mitigate CVE-2025-45490, update the Linksys E5600 firmware to the latest version that addresses this vulnerability.
3
What products are affected by CVE-2025-45490?
CVE-2025-45490 affects Linksys E5600 devices running firmware version 1.1.0.26.
4
What feature is vulnerable in CVE-2025-45490?
CVE-2025-45490 exploits a command injection vulnerability in the runtime.ddnsStatus DynDNS function.
5
Can CVE-2025-45490 be exploited remotely?
Yes, CVE-2025-45490 can be exploited remotely if an attacker can access the affected device's functionality.