CVE-2025-45489 - Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter

Back Back to CVE browser

CRITICAL

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter

Published May 6, 2025

9.8

CRITICAL

CVSS 3.1

EPSS 1.75%

Description

Linksys E5600 v1.1.0.26 was discovered to contain a command injection vulnerability in the runtime.ddnsStatus DynDNS function via the hostname parameter.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-77

References (3)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-13616		Advisory
https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_ddnsStatus_DynDNS_hostname/CI_ddnsStatus_DynDNS_hostname.pdf		Exploit
https://github.com/JZP018/vuln03/blob/main/linksys/E5600/CI_ddnsStatus_DynDNS_hostname/CI_ddnsStatus_DynDNS_hostname.py		Product

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published May 6, 2025

Updated May 6, 2025

Reserved Apr 22, 2025

Link CVE-2025-45489

CISA Vulnrichment

Updated May 6, 2025

NVD

Status Analyzed

Modified Jun 17, 2026

Link CVE-2025-45489

Red Hat

No data

ENISA EUVD

Assigner mitre

Published May 6, 2025

Updated May 6, 2025

Link EUVD-2025-13616

GitHub

No data