CVE-2021-25310 - CVE House
Back to Database
Status published High CVE-2021-25310

The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices...

Vulnerability Description

The administration web interface on Belkin Linksys WRT160NL 1.0.04.002_US_20130619 devices allows remote authenticated attackers to execute system commands with root privileges via shell metacharacters in the ui_language POST parameter to the apply.cgi form endpoint. This occurs in do_upgrade_post in mini_httpd. NOTE: This vulnerability only affects products that are no longer supported by the maintaine

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-25310

Credits & Attribution

No credits recorded in the NVD database.

References

More from belkin

View All →
CVE-2022-30105
In Belkin N300 Firmware 1.00.08, the script located at /setting_hidden.asp,...
Critical 9.8
CVE-2020-26561
Belkin LINKSYS WRT160NL 1.0.04.002_US_20130619 devices have a stack-based buffer overflow...
High 8.8
CVE-2019-17532
An issue was discovered on Belkin Wemo Switch 28B WW_2.00.11057.PVT-OWRT-SNS...
High 7.5
CVE-2019-12780
The Belkin Wemo Enabled Crock-Pot allows command injection in the...
Critical 9.8
CVE-2015-5536
Belkin N300 Dual-Band Wi-Fi Range Extender with firmware before 1.04.10...
Critical 9

Affected Vendor

Affected Software

linksys wrt160nl firmware
Vulnerable Versions:
1.0.04.002_us_20130619

Timeline

Official Publish: February 2nd, 2021
Last Modified: August 3rd, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.