Volerion logoVolerion
Volerion logoVolerion

Linksys E7350 Command Injection Vulnerability in WPS Function

Vulnerability

A command injection vulnerability has been identified in the Linksys E7350 router, specifically in version 1.1.00.032. The issue arises in the 'apcli_do_enr_pbc_wps' function, where the 'ifname' parameter is vulnerable to injection attacks.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the device.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
0.3
impact
7.5
exploitability
9.1
remediation
0.0
relevance
0.0
threat
6.4
urgency
2.9
incentive
9.2

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.