Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2024-22543

An issue was discovered in Linksys Router E1700 1.0.04 (build 3), allows authenticated attackers to escalate privileges via a crafted GET request to the /goform/* URI or via the ExportSettings function.

Published

2024-02-27T01:15:06.980

Last Modified

2025-04-08T14:41:22.843

Status

Analyzed

Source

[email protected]

Severity

CVSSv3.1: 6.1 (MEDIUM)

Weaknesses

Type: Secondary
CWE-613

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Operating System	linksys	e1700_firmware	1.0.04	Yes
Hardware	linksys	e1700	-	No

References

https://mat4mee.notion.site/Leaked-SessionID-can-lead-to-authentication-bypass-on-the-Linksys-Router-E1700-f56f9c4b15e7443fa237bd1b101a18d2 Exploit, Third Party Advisory ([email protected])
https://mat4mee.notion.site/Leaked-SessionID-can-lead-to-authentication-bypass-on-the-Linksys-Router-E1700-f56f9c4b15e7443fa237bd1b101a18d2 Exploit, Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)