CVE Bulletin

CVE-2024-33788

Written by Mission Secure | May 6, 2024 2:52:00 PM

CVE-2024-33788 vulnerability in Linksys E5600 routers allows attackers to execute commands via the PinCode parameter, posing risks to operational technology (OT) environments reliant on these routers for network connectivity. This flaw enables unauthorized access and potential compromise of OT systems and processes, emphasizing the importance of securing network infrastructure in OT environments.

From the CVE database:

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability via the PinCode parameter at /API/info form endpoint.

https://www.cve.org/CVERecord?id=CVE-2024-33788