CVE-2020-35713 is a critical vulnerability affecting Belkin Linksys RE6500 devices running firmware versions prior to 1.0.012.001. This flaw allows unauthenticated remote attackers to execute arbitrary commands or reset the administrator password by injecting shell metacharacters into the goform/setSysAdm page. With a CVSS score of 9.8 (CRITICAL) and an EPSS score indicating high exploitability, the vulnerability poses a significant risk due to its network-based attack vector, low complexity, and complete compromise potential (C, I, A: H). While not listed on CISA's KEV catalog, Nuclei templates exist for this vulnerability, suggesting readily available exploit code, though there is no evidence of active exploitation or significant community discussion.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 1.0.012.001CPE matchmatch criteria | cpe:2.3:o:linksys:re6500_firmware:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.