CVE-2022-38841 – Linksys AX3200 V1.1.00 - Command Injection

https://notcve.org/view.php?id=CVE-2022-38841

Linksys AX3200 1.1.00 is vulnerable to OS command injection by authenticated users via shell metacharacters to the diagnostics traceroute page. Linksys AX3200 version 1.1.00 suffers from a remote command injection vulnerability. • https://www.exploit-db.com/exploits/51035 http://packetstormsecurity.com/files/171433/Linksys-AX3200-1.1.00-Command-Injection.html https://drive.google.com/drive/folders/1rAa4zzJPwMop0AEMiI2NKqUaZno7Ccqb?usp=sharing • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •