6.6Orta

CVE-2026-25603Path Traversal vulnerability in Linksys MR9600, Linksys MX4200

Linksys MR9600; Linksys MX4200 Yayım: (8 ay önce)

Açıklama

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Linksys MR9600, Linksys MX4200 allows that contents of a USB drive partition can be mounted in an arbitrary location of the file system. This may result in the execution of shell scripts in the context of a root user.This issue affects MR9600: 1.0.4.205530; MX4200: 1.0.13.210200.

Zayıflık türü (CWE): CWE-22

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

ÜreticiÜrünSürümler
Linksys MR9600 1.0.4.205530
linksys mr9600 firmware 1.0.4.205530
Linksys MX4200 1.0.13.210200
linksys mx4200 firmware 1.0.4.205530

Kaynaklar ve yamalar

CPE eşleşmeleri (NVD) (2)

  • cpe:2.3:o:linksys:mr9600_firmware:1.0.4.205530:*:*:*:*:*:*:*
  • cpe:2.3:o:linksys:mx4200_firmware:1.0.4.205530:*:*:*:*:*:*:*