What is GHSA-c6xm-fp38-v723?

GHSA-c6xm-fp38-v723 is a security advisory published by GitHub Security Advisories with High severity. Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows...

Which CVE IDs does GHSA-c6xm-fp38-v723 cover?

GHSA-c6xm-fp38-v723 covers the following CVE IDs: CVE-2013-20007. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-c6xm-fp38-v723?

GHSA-c6xm-fp38-v723 has a CVSS v3 base score of 7.2, published by GitHub Security Advisories.

GHSA-c6xm-fp38-v723HighCVSS 7.2

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows...

Vendor

GitHub Security Advisories

Published

October 28, 2026

Last Modified

October 28, 2026

🔗 CVE IDs covered (1)

CVE-2013-20007 →

📋 Description

Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and run a backdoor, gaining full device control.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2013-20007
https://www.exploit-db.com/exploits/24476
https://www.s3cur1ty.de/m1adv2013-016
https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-os-command-injection-via-timer-interval-in-setup-cgi
https://github.com/advisories/GHSA-c6xm-fp38-v723