Critical Alert 2 Active Exploits Detected Today

CVE-2026-46817 — Oracle E-Business Suite Improper Privilege Management Vulnerability →
CVE-2023-4346 — KNX Association KNX Protocol Connection Authorization Option 1 Overly Restrictive Account Lockout Mechanism Vulnerability →
Powered by CVE Watchtower
×
July 16, 2026

CVE Watchtower


← Back to CVE List

CVE-2013-3307NVD

Vulnerability Summary

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.
Severity Level
HIGH(8.3)
Published Date
Jul 11, 2025
Last Modified
Jul 15, 2025
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
Data Pending
Root Weakness (CWE)
CWE-78: OS Command Injection ↗
The software constructs all or part of an OS command using externally-influenced input, but does not properly neutralize special elements.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeChanged
ConfidentialityLow
IntegrityLow
AvailabilityLow

External References