Linksys e3200 vulnerabilities

2 CVEs affecting Linksys e3200, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2013-3307, published 2025-07-11.

More from Linksys.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-34037, published 2025-06-24. Critical severity, CVSS 10.0. EPSS: 92.8% chance of exploitation in the next 30 days. An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly…
• CVE-2013-3307, published 2025-07-11. High severity, CVSS 8.3. EPSS: 63.1% chance of exploitation in the next 30 days. Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port…