CVE-2024-57222
Linksys
CVE-2024-57222 is a command injection vulnerability found in Linksys E7350 routers. This flaw allows attackers to execute arbitrary commands on the system via the ifname parameter in the apcli_cancel_wps function. Although the CVSS score is 6.3, the SOCRadar Vulnerability Risk Score (SVRS) is 30, indicating a relatively lower level of immediate risk compared to vulnerabilities with SVRS scores above 80. Nevertheless, the presence of the "In The Wild" tag suggests active exploitation may be occurring. Successful exploitation could lead to complete system compromise, data theft, or denial of service. Organizations using the Linksys E7350 should investigate and apply any available patches to mitigate the vulnerability. While not immediately critical based on SVRS, continuous monitoring is advised.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.