CVE-2013-33078.3HighCWE-78

CVE-2013-3307: Linksys E1000 vulnerability

Linksys · E1000

Fixed in 2.0.05 · Affected: Linksys E1000 before 2.0.05 · Exploitation: not established

ExploitationNot established

Not in CISA KEV as of catalogue 2026.11.13 (13 Nov)

In CISA KEV: not seen
Exploited (reported): not seen
Scanning observed: not seen
Proof of concept public: not seen
Not establishedNothing in the sources we check

63.1%probability of exploitation in the next 30 days

99th percentile

050100

Higher than 99% of scored CVEs

8.3HighCVSS 3.1

LowMediumHighCrit.

DescriptionNVD

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

On the Atlas

Every published CVE is on the CyberSIXT Atlas, grouped by weakness, vendor and month.

Open the Atlas

Exploitation: Likely to be exploited (10% or more). EPSS gives it a 10% or higher chance of exploitation in the next 30 days.
CISA KEV: Not listed
Public check: No public nuclei template
Weakness: OS Command Injection · Command and Code Injection
Vendor: Linksys
Published: July 2025
Band: Likely to be exploited (10% or more), July 2025

Coverage1 article · 1 outlet

First in our coverage: SecurityOnline, 23 Jun.

23 Jun 09:29
AryStinger malware hijacks over 4,300 outdated routers in Asia
SecurityOnline · first in our coverage

New articles also arrive in the RSS feed.