CVE-2025-45488 - Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter

Back Back to CVE browser

CRITICAL

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter

Published May 6, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 11.57%

Description

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the mailex parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (2)

Link	Providers	Tags
https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_ddnsStatus_DynDNS_mailex/CI_ddnsStatus_DynDNS_mailex.pdf		Exploit
https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_ddnsStatus_DynDNS_mailex/CI_ddnsStatus_DynDNS_mailex.py		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 6, 2025

Updated May 6, 2025

Reserved Apr 22, 2025

Link CVE-2025-45488

CISA Vulnrichment

Updated May 6, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-45488

Red Hat

Severity n/a

Public date n/a

Links CVE-2025-45488