CVE-2013-3307

CVSS: 8.3 High
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
Risk score: 66.4
Published: 2025-07-11
Status: Deferred

Linksys E1000 devices through 2.1.02, E1200 devices before 2.0.05, and E3200 devices through 1.0.04 allow OS command injection via shell metacharacters in the apply.cgi ping_ip parameter on TCP port 52000.

Weaknesses

CWE-78

Coverage 2

threat-intel

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

A new malware family, dubbed AryStinger, is exploiting vulnerabilities in older Realtek RTL819X routers to create a reconnaissance network. Approximately 4,300 routers, primarily D-Link models, have been infected, scanni…

The Hacker News · Jun 22, 2026 Medium

CVE-2013-3307 CVE-2016-5681 CVE-2025-11837 KR CN SE reconnaissance proxy iot

malware

AryStinger botnet infected thousands of D-Link routers worldwide

A new botnet, named AryStinger, has been discovered compromising over 4,000 outdated D-Link routers worldwide, turning them into proxies for malicious traffic. The malware utilizes multiple vulnerabilities to perform sca…

BleepingComputer · Jun 21, 2026 High

CVE-2013-3307 CVE-2016-5681 CVE-2025-11837 KR CN SE router botnet dns

All articles mentioning it

Advisories and references

web.archive.org/web/20140421001918/https://www.trustwave.com/spiderl...