Linksys RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000 OS Command Injection Vulnerability

A command injection vulnerability has been identified in Linksys routers RE6250, RE6300, RE6350, RE6500, RE7000, and RE9000, all running specific firmware versions. This vulnerability allows remote attackers to execute arbitrary operating system commands by manipulating the 'filename' argument in the 'cgiMain' function of the 'upload.cgi' file. The issue has been publicly disclosed and is actively exploitable.

Impact

Exploitation of this vulnerability allows for remote command execution on the affected device.

Reproduction

To reproduce this vulnerability, send a POST request to '/cgi-bin/upload.cgi' with the 'filename' parameter crafted to include a command, such as one that would initiate a reverse shell. The router will execute the command, providing a shell access.