CVE-2024-22544 Command injection in n/a

What is CVE-2024-22544?

CVE-2024-22544 is a high-severity command injection vulnerability in n/a, published on 27 Feb 2024. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

An issue was discovered in Linksys Router E1700 version 1.0.04 (build 3), allows authenticated attackers to execute arbitrary code via the setDateTime function.

Weakness: CWE-77

Which versions are affected by CVE-2024-22544?

It affects 1 product.

Products include Linksys E1700 Firmware.

How do I fix CVE-2024-22544?

No fix has been published for CVE-2024-22544 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2024-22544 being exploited?

There is no known exploitation of CVE-2024-22544 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2025-9525 Linksys E1700 setWan stack-based overflow High 8.7
• CVE-2025-9526 Linksys E1700 setSysAdm stack-based overflow High 8.7
• CVE-2025-9527 Linksys E1700 QoSSetup stack-based overflow High 8.7
• CVE-2024-22543 Privilege escalation in n/a Medium 6.1
• CVE-2025-9528 Linksys E1700 systemCommand os command injection Medium 5.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-g8mv-v454-jjc5.