CVE-2025-34037

Linksys Routers E/WAG/WAP/WES/WET/WRT-Series

State: Published
Severity: 10.0 Critical
Published: Jun 24, 2025
Updated: Jul 22, 2026
Reserved: Apr 15, 2025

Description

An OS command injection vulnerability exists in various models of E-Series Linksys routers via the /tmUnblock.cgi and /hndUnblock.cgi endpoints over HTTP on port 8080. The CGI scripts improperly process user-supplied input passed to the ttcp_ip parameter without sanitization, allowing unauthenticated attackers to inject shell commands. This vulnerability was reported to be exploited in the wild by the "TheMoon" worm in 2014 to deploy a MIPS ELF payload, enabling arbitrary code execution on the router. Additionally, this vulnerability may affect other Linksys products to include, but not limited to, WAG/WAP/WES/WET/WRT-series router models and Wireless-N access points and routers. Exploitation evidence was observed by the Shadowserver Foundation on 2025-02-06 UTC.

Scores

CVSS	Score	Vector	Source
4.0	10.0 Critical	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H	VulnCheck

Weaknesses

CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

Affected Products

Product	Versions
E4200Linksys	before 1.0.06Affected
E3200Linksys	before 1.0.05Affected
E3000Linksys	before 1.0.06Affected
E2500 v1/v2Linksys	before 2.0.00Affected
E2100L v1Linksys	1.0.05 and earlierAffected
E2000Linksys	0Affected
E1550Linksys	1.0.03 and earlierAffected
E1500 v1Linksys	before 1.0.06Affected
E1200 v1Linksys	1.0.04 and earlierAffected
E1000 v1Linksys	before 2.1.03Affected
E900 v1Linksys	before 1.0.04Affected

References

https://isc.sans.edu/diary/17633technical-description
https://www.exploit-db.com/exploits/31683third-party-advisoryexploit
https://vulncheck.com/advisories/linksys-routers-command-injectionthird-party-advisory
https://github.com/Jarrettgohxz/CVE-research/tree/main/Linksys/E-series/CVE-2025-34037

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.