RCE in Linksys Mr8300
CVE-2022-38132
Command injection vulnerability in Linksys MR8300 router while Registration to DDNS Service. By specifying username and password, an attacker connected to the router's web interface can execute arbitrary OS commands. The username and password fields are not sanitized correctly and are used as URL construction arguments, allowing URL redirection to an arbitrary server, downloading an arbitrary script file, and eventually executing the file in the device. This issue affects: Linksys MR8300 Router 1.0.
Vulnerability class: Command Injection (OS Command Injection)
EPSS: 0.006 (45.6th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.
Affected products
- Linksys Mr8300
- Linksys Mr8300_firmware — versions 1.0
- Linksys Mr8300 Router — versions Firmware 1.0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- info@cybellum.com (x_refsource_MISC, Release Notes, Vendor Advisory)
Frequently asked questions
- What is CVE-2022-38132?
- CVE-2022-38132 is a high-severity vulnerability in Linksys Mr8300, classified under OS Command Injection. CVSS score: 8.2/10. Published 2022-08-24.
- How severe is CVE-2022-38132?
- High severity. CVSS v3 base score is 8.2 out of 10.
- Is CVE-2022-38132 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.