An OS command injection flaw exists in the addStaticRoute function of the Linksys E1700 router firmware 1.0.0.4.003. By manipulating the staticRoute_IP_setting, staticRoute_Netmask_setting, staticRoute_Gateway_setting, or staticRoute_Metric_setting arguments sent to /goform/addStaticRoute, an attacker can inject arbitrary shell commands. This vulnerability can lead to full compromise of the router’s operating system, allowing an attacker to execute commands with the privileges of the router’s firmware process, potentially enabling remote control, data exfiltration, or denial of service.

The affected product is the Linksys E1700 router running firmware version 1.0.0.4.003. No other versions or models are listed as vulnerable in the available data.

The CVSS score of 9.4 reflects the high severity of this OS command injection. The EPSS score of 2% indicates that, although not among the most frequently exploited vulnerabilities overall, the flaw has a publicly available exploit and is not listed in the CISA KEV catalog. The description states that remote exploitation is possible via the router’s web interface, but it does not specify whether authentication is required. The wording suggests that the attacker could send the malicious parameters without credentials; however, this conclusion is inferred from the description rather than explicitly stated.