CVE-2025-45491: Command Injection
Published May 6, 2025
·Updated
Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the username parameter.
Affected Software
3 affected components
LinkSys E5600
All of the following
LinkSys E5600 Firmware=1.1.0.26
LinkSys E5600
Event History
May 6, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 PM
DescriptionSeverityWeakness
Mar 6, 57321
Event
via FIRST·12:22 AM
Frequently Asked Questions
1
What is the severity of CVE-2025-45491?
CVE-2025-45491 has a high severity rating due to its command injection vulnerability.
2
How do I fix CVE-2025-45491?
To fix CVE-2025-45491, update your Linksys E5600 firmware to the latest version provided by Linksys.
3
What is the impact of exploiting CVE-2025-45491?
Exploiting CVE-2025-45491 can allow an attacker to execute arbitrary commands on the device.
4
Which software is affected by CVE-2025-45491?
CVE-2025-45491 specifically affects Linksys E5600 firmware version 1.1.0.26.
5
Where can I find more information about CVE-2025-45491?
More information about CVE-2025-45491 can be found in security advisories and vulnerability databases.