CVE-2013-3307

CVE-2013-3307 describes an OS command injection vulnerability in Linksys E1000, E1200, and E3200 routers, allowing attackers to execute arbitrary commands via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000. This vulnerability carries a high CVSS score of 8.3, indicating a critical risk due to its network-based attack vector, low attack complexity, and potential for partial impact on confidentiality, integrity, and availability. While no direct Metasploit or Nuclei exploits are listed, an ExploitDB entry for a similar Linksys device suggests potential exploitability, and the vulnerability has been linked to the "BotenaGo" malware, indicating active exploitation in the wild. Community discussion and media coverage further highlight its relevance.