CVE-2024-42633: Linksys e1500 Firmware

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

A Command Injection vulnerability exists in the do_upgrade_post function of the httpd binary in Linksys E1500 v1.0.06.001. As a result, an authenticated attacker can execute OS commands with root privileges.

Affected products

• Linksys e1500 Firmware: version 1.0.06.001 only

Published 2024-08-19. Last modified 2026-06-17.