Linksys E-Series Routers Multiple Vulnerabilities

Multiple vulnerabilities have been identified in multiple Linksys E-Series routers, which can be exploited by malicious people to bypass certain security restrictions.

1. The device does not properly restrict access to tmUnblock.cgi and hndUnblock.cgi, which can be exploited to inject and execute arbitrary shell commands.
   Note: Reportedly, this vulnerability is currently actively exploited in the wild.
2. The device does not properly restrict access to the access console, which can be exploited to gain access to otherwise restricted functionality via TCP port 8083.

Note: Vendor patch is currently unavailable.