CVE-2013-20007
HIGH
NVD
CVSS Score
7.2
Severity
HIGH
Published
Oct 28, 2026
Vendor
unknown
Description
Linksys WAG200G through 1.01.06 contains an OS command injection vulnerability that allows authenticated attackers to execute commands by injecting backtick-delimited input into the timer_interval parameter. Attackers can send a crafted POST request to setup.cgi to start telnetd or download and run a backdoor, gaining full device control.