{"cve":"CVE-2020-35713","epss":{"score":0.32936},"mitre":{"cpes":[],"created":"2020-12-26T00:47:04+00:00","description":"Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{}},"mitre_repo_path":"cves/2020/35xxx/CVE-2020-35713.json","references":["https://bugcrowd.com/disclosures/72d7246b-f77f-4f7f-9bd1-fdc35663cc92/linksys-re6500-unauthenticated-rce-working-across-multiple-fw-versions","https://downloads.linksys.com/support/assets/releasenotes/ExternalReleaseNotes_RE6500_1.0.012.001.txt","https://resolverblog.blogspot.com/2020/07/linksys-re6500-unauthenticated-rce-full.html"],"title":null,"updated":"2024-08-04T17:09:15.213000+00:00","vendors":[],"weaknesses":[]},"nvd":{"cpes":["cpe:2.3:h:linksys:re6500:-:*:*:*:*:*:*:*","cpe:2.3:o:linksys:re6500_firmware:*:*:*:*:*:*:*:*"],"created":"2020-12-26T01:15:12.260000+00:00","description":"Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page.","metrics":{"cvssV2_0":{"score":10.0,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"cvssV3_0":{},"cvssV3_1":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"cvssV4_0":{}},"nvd_repo_path":"2020/CVE-2020-35713.json","references":["https://bugcrowd.com/disclosures/72d7246b-f77f-4f7f-9bd1-fdc35663cc92/linksys-re6500-unauthenticated-rce-working-across-multiple-fw-versions","https://downloads.linksys.com/support/assets/releasenotes/ExternalReleaseNotes_RE6500_1.0.012.001.txt","https://resolverblog.blogspot.com/2020/07/linksys-re6500-unauthenticated-rce-full.html"],"title":null,"updated":"2026-06-17T03:14:10.083000+00:00","vendors":["linksys","linksys$PRODUCT$re6500","linksys$PRODUCT$re6500_firmware"],"weaknesses":["CWE-78"]},"opencve":{"changes":[],"cpes":{"data":["cpe:2.3:h:linksys:re6500:-:*:*:*:*:*:*:*","cpe:2.3:o:linksys:re6500_firmware:*:*:*:*:*:*:*:*"],"providers":["nvd"]},"created":{"data":"2020-12-26T00:47:04+00:00","provider":"mitre"},"description":{"data":"Belkin LINKSYS RE6500 devices before 1.0.012.001 allow remote attackers to execute arbitrary commands or set a new password via shell metacharacters to the goform/setSysAdm page.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{"score":10.0,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C"},"provider":"nvd"},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"},"provider":"nvd"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.32936},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{},"provider":null},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://bugcrowd.com/disclosures/72d7246b-f77f-4f7f-9bd1-fdc35663cc92/linksys-re6500-unauthenticated-rce-working-across-multiple-fw-versions","https://downloads.linksys.com/support/assets/releasenotes/ExternalReleaseNotes_RE6500_1.0.012.001.txt","https://resolverblog.blogspot.com/2020/07/linksys-re6500-unauthenticated-rce-full.html"],"providers":["mitre","nvd"]},"title":{"data":null,"provider":null},"updated":{"data":"2024-11-21T05:27:54.217000+00:00","provider":"nvd"},"vendors":{"data":["linksys","linksys$PRODUCT$re6500","linksys$PRODUCT$re6500_firmware"],"providers":["nvd"]},"weaknesses":{"data":["CWE-78"],"providers":["nvd"]}}}