Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
6.3

Linksys E5600 Router Ping Test Command Injection

CVE-2025-29226 · published 1 year ago
Summary

The Linksys E5600 router has a security issue that could allow hackers to execute arbitrary system commands, potentially allowing them to take control of the router or disrupt its operation. This is a result of a vulnerable script in the router's configuration file. Update the router's firmware to the latest version to fix this issue.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
linksys e5600_firmware 1.1.0.26
cpe:2.3:o:linksys:e5600_firmware:1.1.0.26:*:*:*:*:*:*:*
Original advisory text
In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["count"] parameter.
In Linksys E5600 V1.1.0.26, the \usr\share\lua\runtime.lua file contains a command injection vulnerability in the runtime.pingTest function via the pt["count"] parameter.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
6.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-77Command Injection
Timeline
Published21 Mar 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-29226 · NVD
Track software like this
Free during beta