{"schema":"threatline.record/2","record":{"id":"CVE-2013-20007","aliases":[],"summary":"Linksys WAG200G through 1.01.06 OS Command Injection via timer_interval in setup.cgi","details":"Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and run a backdoor, gaining full device control.","categories":["Network & edge"],"product":"WAG200G","vendor":"Linksys","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2013-20007","source_modified_at":"2026-10-28T02:03:10.353Z","fetched_at":"2026-10-28T08:18:35.509402Z","product":"WAG200G","vendor":"Linksys","versions":[{"version":"0","status":"affected","versionType":"custom","lessThanOrEqual":"1.01.06"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":8.6,"severity":"High","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-28T02:03:10.353Z","modified_at":"2026-10-28T02:03:10.353Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2013-20007","fetched_at":"2026-10-28T08:18:35.509402Z","source_modified_at":"2026-10-28T02:03:10.353Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://www.s3cur1ty.de/m1adv2013-016","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.exploit-db.com/exploits/24476","tags":["exploit"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/linksys-wag200g-through-1.01.06-os-command-injection-via-timer-interval-in-setup-cgi","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"vendor and product","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-10-28T02:03:10.353Z","content_hash":"c6788ed64cb759df3cd378ca49868f6ba1f33b60dd5119f742e184e41860c5ec"}}