CVE-2013-20007High· 7.2▾ TwilightLinksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 39.6 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
2.0%
Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and run a backdoor, gaining full device control.
WAG200G <= 1.01.06Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2013-20008Medium· 6.8Linksys WAG200G through 1.01.06 Admin Password Change Without Current Password
CVE-2013-20009Medium· 4.8Linksys WAG200G through 1.01.06 Stored XSS via policy_name Parameter
CVE-2026-108896Critical· 9.9A vulnerability was found in Linksys E1700 1.0.0.4.003
CVE-2026-108895Critical· 9.9A weakness has been identified in Linksys E1700 1.0.0.4.003
CVE-2026-108894Critical· 9.9A security flaw has been discovered in Linksys E1700 1.0.0.4.003
CVE-2026-86299Critical· 9.9A vulnerability was detected in Linksys RE7000 2.0.15