CVE-2024-57539
Published: 21 January 2025
Summary
CVE-2024-57539 is a high-severity Command Injection (CWE-77) vulnerability in Linksys E8450 Firmware. Its CVSS base score is 8.2 (High).
Operationally, exploitation aligns with the MITRE ATT&CK technique Exploit Public-Facing Application (T1190); ranked in the top 9.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
The strongest mitigations our analysis identified are NIST 800-53 SI-10 (Information Input Validation) and SI-2 (Flaw Remediation).
Deeper analysis
Linksys E8450 firmware version 1.2.00.360516 contains a command injection vulnerability (CWE-77) that can be triggered through the userEmail parameter. The flaw received a CVSS 3.1 score of 8.2, reflecting network attack vector, low attack complexity, and no requirements for authentication or user interaction, with impacts limited to confidentiality and high integrity.
An unauthenticated remote attacker can supply crafted input to the userEmail field and execute arbitrary operating-system commands on the device. Successful exploitation allows modification of device configuration or data while providing only limited visibility into other information, consistent with the reported impact metrics.
The associated EPSS score reached a peak of 0.0835 after disclosure, up from a lower baseline to the current value of 0.0554, indicating emerging exploitation interest. Public technical details are available in a GitHub repository describing the issue, though no vendor advisory or patch information is referenced in the supplied data.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-53614
Vulnerability details
Linksys E8450 v1.2.00.360516 was discovered to contain a command injection vulnerability via userEmail.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise TechniquesAI
Why these techniques?
The command injection vulnerability via the userEmail parameter in the Linksys E8450 router web interface enables exploitation of a public-facing application (T1190) to achieve remote code execution through Unix shell commands (T1059.004).
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Directly mitigates command injection by requiring validation of user inputs like the userEmail parameter to block arbitrary command execution.
Requires timely remediation of the specific firmware flaw enabling command injection in Linksys E8450 v1.2.00.360516.
Restricts unauthorized or malformed inputs to the userEmail parameter, preventing exploitation of the command injection vulnerability.