CVE-2010-2261: Linksys WAP54GV3

High severity, CVSS 10.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Linksys WAP54Gv3 firmware 3.04.03 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the (1) data2 and (2) data3 parameters to (a) Debug_command_page.asp and (b) debug.cgi.

Affected products

• Linksys WAP54GV3: up to and including 3.04.03; version 3.05.03 only

Published 2010-06-10. Last modified 2026-06-16.