Medium severityNVD Advisory· Published Aug 1, 2025· Updated Apr 15, 2026
CVE-2013-10062
CVE-2013-10062
Description
A directory traversal vulnerability exists in Linksys router's web interface (tested on the E1500 model firmware versions 1.0.00, 1.0.04, and 1.0.05), specifically in the /apply.cgi endpoint. Authenticated attackers can exploit the next_page POST parameter to access arbitrary files outside the intended web root by injecting traversal sequences. This allows exposure of sensitive system files and configuration data.
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/auxiliary/scanner/http/linksys_e1500_traversal.rbnvd
- web.archive.org/web/20150428184015/http://www.s3cur1ty.de/m1adv2013-004nvd
- www.exploit-db.com/exploits/24475nvd
- www.vulncheck.com/advisories/linksys-legacy-routers-path-traversalnvd
News mentions
0No linked articles in our index yet.