Linksys E5600 Command Injection Vulnerability in traceRoute Function

A command injection vulnerability has been identified in the Linksys E5600 router, specifically in version 1.1.0.26. The issue arises within the traceRoute function, where the pt parameter can be manipulated to inject and execute arbitrary commands.

Impact

Exploitation of this vulnerability allows for command injection, where an attacker can execute arbitrary commands on the affected device.

Reproduction

To reproduce this vulnerability, send a request to the Linksys E5600 router's traceRoute function, including a crafted pt parameter that injects malicious commands. The router's firmware version must be 1.1.0.26.